Normal NSFW "Adult" pictures. This directory is separate from the normal "Wordpress" years sub directory structure (but they do have pictures in them also). Sorted by sets by numbered sub-directories. http://bestporngallery.com/wp-content/uploads/photo-gallery/Nubiles Porn/ submitted by /u/BustaKode [link] [comments]

As title says - Krishna related PDF's https://ebooks.iskcondesiretree.com/pdf/ submitted by /u/BustaKode [link] [comments]

Mainly Moon related pictures and videos. In the sub dir "Interviews", some quality interviews (If Trump triggers you, then avoid.) http://americasuncommonsense.com/blog/wp-content/ submitted by /u/BustaKode [link] [comments]

I work for a Fortune 500 company and we recently developed and deployed an in-house platform that is solely used by employees and employees only. The platform is used every single day across the country by field specialists (on their iPads). Curious to know what kind of security risks we should look out for…if any? Yes, there is sensitive customer data stored on this platform that is accessible by the field team, corporate account team, and the IT team. submitted by /u/Limp_Help8388 [link] [comments]

Today i noticed that a large amount of sites i opened in Private Browsing had a large amount of cookie data stored even after i closed firefox under "Cookies and Site Data" setting. I started looking into it by performing the following tests: - Cleared all the unwanted cookies from Firefox and opened a private browsing window with all my addons enabled. - Visited a bunch of random sites , closed private browsing and the cookies remained there. - Cleared the cookies again and closed Firefox. - This time i disabled all of my addons. - Did the same test with the websites and none appeared on Cookies and Site Data. Interesting. - I started enabling the plugins one by one and performed the same site test each time i enabled a plugin. - The time i enabled Wappalyzer i noticed that cookie data remained stored. What are your thoughts on this? submitted by /u/Voyaller [link] [comments]

Hi all 👋 i have a questionnaire assessing equipments in term of cyber resilience. Close ended questions have been approved and now I need to add weights to each questions to create the weighting matrix. My question is that i feel all questions are very critical and I feel like they are all worth maximum weight, how will I assign the weights? r/CyberResilience submitted by /u/---Agent47--- [link] [comments]

Forgive me for any faux pas I may commit, I am a long-time lurker first time poster. I wanted to get some feedback from you all. There is a weird device that consistently shows up in all my bluetooth devices (phone, iPads, etc). We live in a house not particularly close to any neighbors, which is why I think this has to be something in my own home. Normally I wouldn't be super concerned, but the name clearly implies something more "adult" than we would have here. It's named USMEM_L_USTHOLE and that's why I'm concerned. I've tried Wunderfind and other apps but they won't let me find the source unless I am connected to it. I've also tried connecting to it, but it's never successful. Please tell me if I should be concerned about this - I keep thinking that if it's on bluetooth it has to be something very close and that is what worries me. Thank you so much for your insights!!!! ​ submitted by /u/FuzzyCow-1103 [link] [comments]

submitted by /u/ustayready [link] [comments]

submitted by /u/ArbitraryWrite [link] [comments]

submitted by /u/dlorenc [link] [comments]

submitted by /u/Vegetable_Treat_5017 [link] [comments]

submitted by /u/ArbitraryWrite [link] [comments]

Check it out ! I quickly go over an osint online tool you can use to find a record of a bunch of WIFI networks near you! https://youtu.be/jHFcP1ItJgE submitted by /u/cyberducky0_0 [link] [comments]

Article URL: https://github.com/openssl/openssl/commit/b1892d21f8f0435deb0250f24a97915dc641c807 Comments URL: https://news.ycombinator.com/item?id=34851608 Points: 1 # Comments: 0

For write my first write-up, I decided to do a write-up of the OhSINT machine on tryhackme, I apologize for any mistake I come to make in… Continue reading on Medium »

Part-5 Continue reading on Medium »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

XSS on Bing.com Continue reading on Medium »

— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — Continue reading on Medium »

Hello learners, I hope you all are doing well. As you all have knew that today we are going to hack a computer system using our Android… Continue reading on System Weakness »

I was testing the target which had its web application and mobile application in scope. Let’s say the target is example.com Continue reading on Medium »

— — — — — — — — — — — — — — — — — — — — — — — — — — — - Continue reading on Medium »

What happened with Bug Zero? Continue reading on Bug Zero »

submitted by /u/IllCow9235 [link] [comments]

submitted by /u/IllCow9235 [link] [comments]

When you go online to find new games, there is no shortage of results, quite the opposite. There are so many sites and games that it can… Continue reading on Medium »

submitted by /u/mingaminga [link] [comments]

In my previous article I wrote about my experiences as a top ranked bug bounty hunter. Continue reading on Medium »

by Maxime Jourdan Continue reading on Medium »

Introduction to SSRF covering its mechanics, techniques, and effective countermeasures to defend against such attacks. Continue reading on InfoSec Write-ups »

I was doing learning withing AWS and playing around with AWS lambda functions. This paritcular lambda functions utilizes boto3 library to… Continue reading on Bug Bounty Hunting »

Introduction: Continue reading on Medium »

When starting mentorship program with @trust__90, the first task I was given, was to do a security research of Angle Protocol — “a… Continue reading on Medium »

Attention all security researchers and crypto enthusiasts! We’re excited to announce that we’re launching a bug bounty campaign on… Continue reading on Medium »

Bug bounty programs have become increasingly popular in recent years as a way for companies to uncover vulnerabilities in their software… Continue reading on Medium »

Can a company that owns a web browser see the unencrypted HTTPS data when you visit a website? submitted by /u/Bored-Giraffe [link] [comments]

Network has been hacked along with remote access to other devices on network. Symptoms: FPS and ping lag, changes go pixels on screen and other devices, remote control of desktop pc Have previously performed fresh install of Windows. Have a unifi router, switch and ap but suffered a network outage today (am sure this was an attack) so I have now removed devices off the network and gone back to ISp provided router/modem. Planning to wipe drives using secure boot and reimage network devices (router switch and ap). Then resetuo network security/firewall and segregated network for other devices in the house. I'll be honest I'm a bit out of my depth here so I've come for help. submitted by /u/Miserable-Apricot-99 [link] [comments]

emv chip software submitted by /u/Balenciaga_- [link] [comments]

YES, YES, YES, I KNOW HTTPS IS BETTER AND PREFERRED, however we have no control over these legacy apps that our end users use. So we have multiple sites that have various internal only web servers that are still running http instead of https. Some are vendor provided webservers others are internally created legacy applications. We noticed with an issue across all browsers (edge, Chrome, firefox) that all sites are being redirected to HTTPS URLs. End users are unable to access the sites by URL, after typing in http://exampleserver1.site.com it then redirects to https://exampleserver1.site.com if they use the server IP address http://123.123.123.123 then the web app works. The internal sites work if we roll back to prior versions of edge, chrome, firefox. We've tried testing disabling the "HTTPS-Only Mode" in Firefox, but users are still getting the same issue of the sites re-directing to https. https://support.mozilla.org/en-US/kb/https-only-prefs?as=u&utm_source=inproduct We've also tried adding in the registry key for edge but once again we are still having the same error https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#automatichttpsdefault YES, YES, YES, I KNOW HTTPS IS BETTER AND PREFERRED, however we have no control over these legacy apps that our end users use. when looking at our Edge STIG we don't see any of the settings microsoft referenced in the above article in the most recent Edge STIG on https://www.stigviewer.com/stig/microsoft_edge/ YES, YES, YES, I KNOW HTTPS IS BETTER AND PREFERRED, however we have no control over these legacy apps that our end users use. Just wondering if anyone has run across this and if so was there an additional registry or browser setting you had to set to bypass the autohttps setting. submitted by /u/Jeeps_guns_bbq [link] [comments]

https://secops.group/blackhat-certified-pentester-bcpen/ I saw this yesterday when I got the Black Hat 2023 registration information. It looks interesting, but I'm curious what others think of it since it reads as a new offering with a high level of expectations without any class/training ahead of the exam. I'd like to get a pentest cert though it's not my only focus (I'm a sole analyst and mostly focused on blue) and I don't want to blow 2k on a test that I may not be fully prepared for. submitted by /u/EnterNam0 [link] [comments]

I'm starting Snort with the following command: snort -i 4 -A console -c C:\snort\etc\snort.conf -l C:\Snort\log -K ascii But I am receiving an error on this line: Commencing packet processing (pid=16632) 02/15-09:46:36.450939 [**] [129:12:1] Consecutive TCP small segments exceeding threshold [**] [Classification: Potentially Bad Traffic] [Priority: 2] {TCP} ab12:0000:0000:0000:789a:0a64:acab:8440:63332 -> ab12:0000:0000:0000:789a:0a64:acab:8440:5432 ERROR: OpenLogFile() => mkdir(C:\Snort\log/ab12:0000:0000:0000:789a:0a64:acab:8440) log directory: Invalid argument Fatal Error, Quitting.. ​ I have found two links that say it's due to the colon in the potential directory name, but have not found anything that says what to do about it. ​ EDIT: I think I just figured it out... after 2 days of looking, I realized that the "-i 4" was based on a different server and on this server it should be "-i 1" for "Ethernet adapter Public" submitted by /u/PCI_Questions [link] [comments]

Can and do Google employees look at your chrome HTTPS data in its unencrypted form? submitted by /u/Bored-Giraffe [link] [comments]

Slack disclosed a bug submitted by analyz3r: https://hackerone.com/reports/1663361 - Bounty: $1500

TikTok disclosed a bug submitted by amans: https://hackerone.com/reports/1498353 - Bounty: $500

Node.js disclosed a bug submitted by mjones-vsat: https://hackerone.com/reports/1808596

I am working on this automation project and I am seeking a way to creating a cobalt strike beacon through a python script. I am trying to minimize the amount of user intervention involved in the process, I don't want to interact with the GUI for it. submitted by /u/baronobeefdip2 [link] [comments]

In this weeks red team tip. I show examples of how to port RDP through an SSH tunnel. I also show SSH Control Sequences a way to do this you may have not seen before. SSH Tunneling Shenanigans submitted by /u/Infosecsamurai [link] [comments]

I understand that people use exploit databases like exploit-db but what tools do you use to detect what the exploits are without breaking the system? submitted by /u/Conchoidally [link] [comments]

submitted by /u/dmchell [link] [comments]

submitted by /u/openrecon [link] [comments]

Article URL: https://twitter.com/KhaledYakdan/status/1626220906606477313 Comments URL: https://news.ycombinator.com/item?id=34836425 Points: 2 # Comments: 0

Article URL: https://old.reddit.com/r/fuzzing/comments/114gbdl/curl_audit_how_a_joke_led_to_significant_findings/ Comments URL: https://news.ycombinator.com/item?id=34832956 Points: 2 # Comments: 0

2022年全球国防网络空间情况综述（网军建设篇-下） by ourren 2022年全球国防网络空间情况综述（网军建设篇-上） by ourren 网络流量异常检测综述 by ourren 更多最新文章，请访问SecWiki

2022年全球国防网络空间情况综述（网军建设篇-下） by ourren 2022年全球国防网络空间情况综述（网军建设篇-上） by ourren 网络流量异常检测综述 by ourren 更多最新文章，请访问SecWiki

submitted by /u/pectoral [link] [comments]

submitted by /u/DLLCoolJ [link] [comments]

submitted by /u/nibblesec [link] [comments]

submitted by /u/limmen [link] [comments]

submitted by /u/qwerty0x41 [link] [comments]

Is there a daily DFIR blog you read? What about your favorite cybersecurity blog that maybe you don't read everyday, but you find to be very educational? ​ What do you guys think of the Internet Storm Center blog? Cheers! submitted by /u/DeadBirdRugby [link] [comments]

I'm aware this seemingly marvelous tool was acquired by Blackbag Technologies: 504ENSICS Labs announced a tool, Spotlight Inspector, that parsed the Spotlight metadata store database (store.db) offline, on several examination systems. This was the first record of the database being successfully reverse engineered. However, a note on the 504ENSICS website states that the Spotlight Inspector intellectual property has been acquired by Blackbag Technologies, Inc. As such, 504ENSICS Labs no longer offers direct free downloads of the tool. Today, this tool is no longer available nor was their methodology, results or analysis of the database structure published or made publicly available. It is unknown if the tool was able to recover deleted records or parse the content for these records. I'm sure someone downloaded it and might still have it around. Though Spotlight may have changed over the years, as recently as 2019, it appears the tool still worked. Does anyone have a copy they are willing to share? 🥺 ::EDIT:: Yes, I have used Spotlight Parser, and it's not bad. But hoping to give something else a try. submitted by /u/GuidoZ [link] [comments]

cURL Audit: How a Joke Led to Significant Findings… Continue reading on Medium »

cURL Audit: How a Joke Led to Significant Findings… Continue reading on Medium »

文章总结推荐了本周的热点资讯、安全事件、一周好文和省心工具，保证大家不错过本周的每一个重点！

攻击者利用被跟踪为CVE-2021-34473和CVE-2021-34523的ProxyShell漏洞来获得对目标网络的初始访问权限。

Hack The Box实战靶场，Soccer靶机，HTB官方评级为Easy,涉及知识点：文件上传漏洞，websocket接口sql注入，suid提权等

国内蜜罐千千万，想和大家讨论一些不同的蜜罐产品，吸引更多的人关注这类蜜罐市场。

安全研究人员指出，新变种“V3G4”很可能向希望对特定网站或在线服务发动网络攻击的客户出售 DDoS 服务。

只有 10% 的企业高管预计将在 2023 年解雇网络安全团队成员，这一比例远低于其他行业。

国内关于 Ghidra 的知识很零散，不利于系统学习，不用担心！《Ghidra权威指南》可以帮助你。

把恶意“注入”ChatGPT，会产生哪些后果？独到视角解析ChatGPT潜在风险，亚信安全网络安全研究院最新研判详细呈现。

Article URL: https://github.com/taythebot/archer Comments URL: https://news.ycombinator.com/item?id=34831499 Points: 2 # Comments: 0

作者：hanwang@知道创宇404实验室 日期：2023年2月17日 漏洞介绍 Citrix在2022年12月份发布了CVSS评分9.8的CVE-2022-27518远程代码执行漏洞通告，距今已经过去两个多月了，由于漏洞环境搭建较为复杂，一直没有相关的分析文章。经过一段时间的diff分析及验证后，发现漏洞成因在于Citrix netscaler在解析SAML xml时对SignatureV...

作者：hanwang@知道创宇404实验室 日期：2023年2月17日 漏洞介绍 Citrix在2022年12月份发布了CVSS评分9.8的CVE-2022-27518远程代码执行漏洞通告，距今已经过去两个多月了，由于漏洞环境搭建较为复杂，一直没有相关的分析文章。经过一段时间的diff分析及验证后，发现漏洞成因在于Citrix netscaler在解析SAML xml时对SignatureV...

Hi, I just read about WhatsApp crash codes. Is this still a thing in 2023? submitted by /u/liquid_nitr0gen [link] [comments]

Hello everyone! I'm in a point in life where I have total flexibility to go whatever direction I want so I was wondering what are the best countries to start a cybersecurity career. I'm a European Union citizen, quite new to cybersecurity (and by no means a seasoned expert), but I also have a few years experience in other type of positions in tech companies, so not really a totally inexperienced worker either. My main priorities are a good salary and also (even if it's later down the road) the possibility to work mostly remote and with flexible schedules. I have a preference for being based in Europe but I'm flexible with that too. Single with no kids and no kind of debt so no constraints on that side either. What are the salaries and job conditions like where you live and what would you say are the best places to start a career? What could be the potential salaries for someone like me? Info about me: - A BSc in engineering - A MSc in cybersecurity - A 6 month internship in a mid-size cybersecurity consultancy firm (mostly pentesting) - 4 years experience in another tech company (one of the big ones), not related to cybersecurity (most of this time I was managing a tech support team but my job was not really technical) - I speak 3 languages, including fluent English and Spanish. - Tons of international experience, studied/worked in different countries for long periods of time. Thanks everyone for the help! submitted by /u/BroX111 [link] [comments]

There are so many options out there for network fuzzing, like Boofuzz, AFLNET, Scapy, etc. I would like to fuzz a local server application that exposes a TCP port that communicates mainly in JSON. Anyone knows what's the state of art approach for that? Generally, is there any resource out there comparing the myriad options available for network fuzzing and is relatively recent? submitted by /u/jafarlihi [link] [comments]

So we complete SOC 2 audits annually along with a 3rd party security firm that audits us. I am working on finding a good GRC tool to help with things but also want to align with a framework and not sure how/which one to pick. submitted by /u/junkaccount1999 [link] [comments]

Hey everyone! Im currently working as a netsec engineer and mainly deal with Firewalls in my day to day business. I recently passed the OSCP because I want to get into Pentesting at some point in the future. My employee asked me recently if Im interested in cloud security and since its one of my weak points, I want to dedicate more time this year to learn and understand how AWS/Azure/GCP work. This could benefit me to deploy firewalls for customers, understand networking in cloud infrastructures and also if I do find a job as a penetration tester. Im really a potato when it comes to cloud and apart from setting up a vm I dont really have any knowledge. My guess is that I should focus on one cloudvendor and then Ill be able to at least find my way through the others? If so, which one would you recommend and why? My plan would then be to first take a beginner course/cert followed up by one which focuses on security. Do you know which courses/certs could help me in achieving? Thank you very much, any advice is appreciated submitted by /u/ConzT [link] [comments]

So I have been eyeing on some small laptops/handhelds from Chinese vendors like GPD and Onemix, and now the Ayaneo 2. But I'm concerned about keyloggers, spyware, and other malware that could be potentially used to steal credentials being shipped with these devices. There are some articles about this topic that involves Huawei/Oppo/Xiaomi phones. I could probably remedy that by doing a fresh install of Windows and not installing any of the manufacturer utilities or drivers... But then, what are the chances that malware could persist in between installs, perhaps at the firmware level, abuse of the Windows Platform Binary Table, manufacturer drivers delivered via windows update, or some other method? submitted by /u/Secepatnya [link] [comments]

I do not have an IT background but enjoy computers and HUGE believer in protecting personal data and privacy against the government, corporations, basically anyone. I'm wondering if this exists and hope I explain this correctly. Is there such thing as a decentralized, peer-to-peer encryption for a chat app/instant messaging? Meaning no single server will hold or record what is being sent between users as a true form of anonymous communication? Similar to bitcoin, what if there was a cryptocurrency that awarded miners for lending their processing power to randomly encrypt peer-to-peer messages. Instead of funneling the message data through a single node or computer, breaking the encrypted message into 3, 5, 7, 10 different packets that are routed through the network of computers used for "mining" then sent to the end user as the intended recipient? I believe something like this on top of a VPN and Tor would make it nearly impossible to track. Plus, if it was operating independently through decentralization, then nobody could log or backdoor the service. My issue is most of the services like WhatsApp or Signal log all your information and gladly had it over as soon as the government comes knocking. Does something like this exist? Is it even possible to have a truly anonymous chat online anymore? submitted by /u/hfh7dc [link] [comments]

submitted by /u/jsonpile [link] [comments]

submitted by /u/achilles4828 [link] [comments]

submitted by /u/poltess0 [link] [comments]

submitted by /u/maltfield [link] [comments]

submitted by /u/CyberArkLabs [link] [comments]

Rocket.Chat disclosed a bug submitted by f0ns1: https://hackerone.com/reports/1757663

I present to you this lazy and unskilled individual with poor opsec, lolminerxmrig. Continue reading on Medium »

An OSINT challenge to figure out a password, SSID of a WAP, and more from just a photo. (Note: This is not a real-life example) Continue reading on Medium »

We’re continuing our ongoing analysis of the current European conflict and the systems, people and decisions that have been able to… Continue reading on Medium »

Hello world! We are busy building the first human risk and continuous monitoring platform. If you are interested in being added to our… Continue reading on Medium »

Hi r/redteamsec, I've mangled with the unofficial LinkedIn and Xing API to retrieve employee information of company pages. Works good so far and may be helpful during red team assessments or phishing. I've also implemented a feature to automatically create a user's email address based on the dumped firstname and lastname. Just choose your prefered email layout via the cli param and you're good to go. Docker images are readily available on Dockerhub. Note: Since users are free to define their name and we are not using the official APIs, the retrieved data can be bogus at some occurences. For example if users append their pronouns, a specific salutation or certificate abbreviations. The scripts filter out some stuff already though. Here the scripts on GitHub: https://github.com/l4rm4nd/LinkedInDumper https://github.com/l4rm4nd/XingDumper Use responsibly. Cheers! submitted by /u/sk1nT7 [link] [comments]

I'm looking at a USB in FTK Imager which was formatted in FAT32. There's a folder with a bunch of deleted files that all show an identical date modified timestamp. Would this point to the possible mass deletion time? submitted by /u/internal_logging [link] [comments]

Hi everyone, I was thinking about possibly taking the OSED https://www.offensive-security.com/courses/exp-301/ for windows exploit Dev. However, since I'm much more familiar with Linux these days I was wondering whats the pros and cons of doing exploit Dev work on each platform. To start off with, I believe I need to narrow my focus and then branch out. Any advice I'd greatly appreciate it, thanks. submitted by /u/_W0z [link] [comments]

I'm looking for blogs where I can read write-ups on how to find and exploit vulnerabilities in real world C programs, not ctfs submitted by /u/wlo1337 [link] [comments]

Article URL: https://www.theepochtimes.com/federal-agency-warns-millions-of-iphone-users-to-change-settings-now_5059459.html Comments URL: https://news.ycombinator.com/item?id=34820946 Points: 3 # Comments: 4

Article URL: https://arstechnica.com/information-technology/2023/02/goanywhere-vulnerability-exploit-used-to-steal-health-info-of-1-million-patients/ Comments URL: https://news.ycombinator.com/item?id=34818898 Points: 2 # Comments: 0

某 T 路由器固件解压缩探秘 by 路人甲 Java反序列化预备全知 by 路人甲 更多最新文章，请访问SecWiki

某 T 路由器固件解压缩探秘 by 路人甲 Java反序列化预备全知 by 路人甲 更多最新文章，请访问SecWiki

In this blog post, I’ll share some helpful Python snippets that you can use to streamline your testing process and make your life easier… Continue reading on Medium »

Hello everyone, my name is Raja Uzair Abdullah and I’m an Application Security Engineer. With my focus on penetration testing and bug… Continue reading on Medium »

Hi all, Continue reading on Medium »

Introduction I hope I don’t sound like a complete n00b, but what or who or where is a BOF? All the cool kids are talking about it, and I just smile and nod. Is he the newest Crypto billionaire, or is a meetup for like-minded hackers, or is it some other 1337 slang? I understand... The post BOFs for Script Kiddies appeared first on TrustedSec.

No content preview

No content preview

No content preview

In this article, we will see what are the top paid cyber security affiliate programs from where you can earn easy passive income and… Continue reading on InfoSec Write-ups »

If you ever worked on a mobile Flutter application for a big company, or if you ever needed to treat your users’ personal data carefully… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

In this article, we will see what are the top paid cyber security affiliate programs from where you can earn easy passive income and… Continue reading on InfoSec Write-ups »

If you ever worked on a mobile Flutter application for a big company, or if you ever needed to treat your users’ personal data carefully… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

In this article, we will see what are the top paid cyber security affiliate programs from where you can earn easy passive income and… Continue reading on InfoSec Write-ups »

If you ever worked on a mobile Flutter application for a big company, or if you ever needed to treat your users’ personal data carefully… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

大规模信息泄露，企业如何增强数据泄露风险的感知？数据脱敏一般规则可以如何制定？面向公司全员的安全考核应该怎么做？

当地时间15日消息，德国航空公司汉莎航空（Lufthansa）的IT故障导致整个集团航空公司的航班延误和中断，全球数千名乘客被困。

谷歌本周二宣布，它正式向运行Android 13的移动设备推出Android隐私沙盒测试版。

在CC1和CC6中，我们最终弹计算器都是通过Runtime.exec进行调用，从CC3我们要介绍一种不通过Runtime来弹计算器的方法，也就是Java中常提到的动态类加载.。

预估有 380 万辆现代汽车和 450 万辆起亚汽车收到影响。

2023年，网络安全行业将更加注重核心关键技术攻关，以重点产业带动网络新兴产业发展，促进网络安全自主技术的广泛应用，网络安全产业蓬勃发展的势头将继续保持。

摆脱了书写声明式的代码，用起来很流畅，提升不少效率，封装可复用逻辑，将 UI 和逻辑分离，提高复用性，view 层代码展示更清晰，少去了很多配置，使用起来更便捷

submitted by /u/zuperfly [link] [comments]

https://www.proteinsynthesis.org/wp-content/uploads/2013/02/ submitted by /u/Glad-Line [link] [comments]

Good to have you back Hacker ! For a little warm-up we are going to hack into an easy level machine called LazyAdmin. At least, we get to… Continue reading on Medium »

submitted by /u/v1brio [link] [comments]

Welcome weary web-travelers! This blog covers the basics of “Passing the Hash” using Mimikatz. This exercise was completed during my Cyber… Continue reading on Medium »

Hi readers, here we will be solving AWSGoat Module 2 (https://github.com/ine-labs/AWSGoat) Continue reading on Medium »

As cyber threats continue to evolve and become more sophisticated, cyber security experts are turning to artificial intelligence (AI)… Continue reading on Medium »

Is there any possible way to access a full version of FTK to take this? I used my first try on just the imager and failed because many questions need the full version. submitted by /u/teemogangg [link] [comments]

Does anyone analyse databases inside of Axiom? Is that even possible or am I missing something? I can find the .db by going through the File System option in Axiom, but after testing belkasoft, viewing databases was smooth compared to Axiom. I’ve tested both tools with the same dataset and it was two different experiences. Tl;dr: Looking to heard your options when it comes to Axiom and databases. submitted by /u/agente_99 [link] [comments]

ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-patch.html submitted by /u/Neustradamus [link] [comments]

So I've been working as a SOC analyst for the last year or so with a MSSP. I've been enjoying it but working with the SIEM sounds really interesting. I think it would be cool to learn tuning and things like that. Problem is I have a ton of experience triaging and investigating alerts but zero experience administering the SIEM. Any ideas? Have any of you made that switch? submitted by /u/_thelinuxnoob_ [link] [comments]

Seems to me this event obscured many current event stories for this circus, essentially paralysis journalistic industry. Were there some cyber attacks starting while journalism was thus paralyzed ? While our attention was artificially detracted. submitted by /u/transdimensionalmeme [link] [comments]

Hey there! Welcome to the world of bug bounty hunting. As a bug bounty expert, let me share with you a story about my recent experience in… Continue reading on Medium »

Once upon a time, there was a hacker who was always on the lookout for new and innovative ways to break into systems. He had a reputation… Continue reading on Medium »

As a bug bounty expert, I have seen firsthand how the world of cybersecurity is constantly evolving. New threats arise every day, and as… Continue reading on Medium »

Once upon a time, in the world of bug bounty hunting, a new player emerged — OpenAI’s GPT-3. The buzz around this language processing tool… Continue reading on Medium »

Once upon a time, in a land far, far away, there was a group of hackers who wanted to test their skills and earn some extra cash. They… Continue reading on Medium »

Once upon a time, in the world of cybersecurity, a group of skilled bug hunters roamed the internet, hunting for vulnerabilities in… Continue reading on Medium »

As a bug bounty expert, I’ve seen all kinds of techniques used to find vulnerabilities in software. But one of the most interesting… Continue reading on Medium »

Bug hunting, also known as ethical hacking, has become a crucial part of modern cybersecurity. Continue reading on Medium »

As a bug bounty expert, I’ve seen the industry evolve over the years with new technologies and tools being introduced every now and then… Continue reading on Medium »

In the world of technology, bugs are inevitable. These errors in code can cause programs to malfunction, create security vulnerabilities… Continue reading on Medium »

Cosmos disclosed a bug submitted by bhatiagaurav1211: https://hackerone.com/reports/1397826 - Bounty: $400

curl disclosed a bug submitted by nyymi: https://hackerone.com/reports/1813864

curl disclosed a bug submitted by nyymi: https://hackerone.com/reports/1814333

8x8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1499114 - Bounty: $777

8x8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1474536 - Bounty: $777

8x8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1473071 - Bounty: $777

8x8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1479894 - Bounty: $777

8x8 Bounty disclosed a bug submitted by emperor: https://hackerone.com/reports/1486310 - Bounty: $777

Nowadays, more global corporations are conducting business online in this age of digital transformation. This provides numerous advantages… Continue reading on Medium »

Guide to the dark side of the internet. Continue reading on The Sleuth Sheet »

I think promo pictures and videos of various cities and countries, https://www.mmvideo.fr/dvd/ submitted by /u/BustaKode [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/moxofoxo [link] [comments]

A meta analysis on the security risks linked to the EV ecosystem. Highlights include: A large number of connection points (Wi-Fi, phones, OTA updates, charging stations) Large number of computerized parts. Potentially deadly disruptions (causing accidents, igniting battieres). Potential to disrupt power grids. Potential for worms that propagate via the charging network. Flaws and PoC attacks. Lack of laws or industry standards that limit wireless connections to critical components. submitted by /u/UnexpectedLizard [link] [comments]

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

We observed Mirai variant V3G4 targeting IoT devices in three separate campaigns in 2022. The post Mirai Variant V3G4 Targets IoT Devices appeared first on Unit 42.

众所皆知，云计算/云原生技术因能极大地提高云上资源利用率以及应用交付效率而被广泛采用。然而，云计算/云原生技术的发展也让用户遭受了更多高级威胁与攻击。如何构建有效的云原生安全管理体系应对层出不穷的安全威胁这一问题也一直受到千行百业用户的关注与热议。国际云安全联盟CSA发布报告《实现安全应用容器架构的最佳实践》该报告旨在成为《保护应用容器和微服务所面临的挑战》文档的配套文档。《保护应用容器和微服务所

土耳其和叙利亚发生大地震后，金融诈骗犯利用这场自然灾害诱骗人们向慈善机构捐款，谋取私利。

在土耳其和叙利亚发生大地震后，金融诈骗犯利用这场自然灾害诱骗人们向慈善机构捐款，谋取私利。

2022 年，苹果总共修复了 10 个 0day，4 个漏洞是在 WebKit 中发现的。

这个世界上只有两种人，黑客和被黑客攻击的人。

作者：sn0w_xxx@知道创宇404实验室 日期：2023年2月15日 准备工具 1.某T固件 2.某T路由器 3.ida 4.binwalk 5.xz-5.6.2 6.squashfs-tools 7.010 Editor 开始分析 固件初始分析 1.利用binwalk -Me + 固件名提取固件中的文件系统，发现提取失败 2.使用binwalk -E + 固件名命令查看固件的熵...

作者：sn0w_xxx@知道创宇404实验室 日期：2023年2月15日 准备工具 1.某T固件 2.某T路由器 3.ida 4.binwalk 5.xz-5.6.2 6.squashfs-tools 7.010 Editor 开始分析 固件初始分析 1.利用binwalk -Me + 固件名提取固件中的文件系统，发现提取失败 2.使用binwalk -E + 固件名命令查看固件的熵...

Article URL: https://www.mail-archive.com/haproxy@formilux.org/msg43229.html Comments URL: https://news.ycombinator.com/item?id=34798082 Points: 2 # Comments: 0

submitted by /u/-Rammus- [link] [comments]

Marking nsfw as I didn't explore too deep. Scott sure loved horses, ufos, and egyptian mytholgy. https://video.lemoin.com/mp4/ submitted by /u/inoculatemedia [link] [comments]

Introduction Continue reading on Veridise »

Introduction Continue reading on Veridise »

Having seen https://twitter.com/elonmusk/status/1625368108461613057?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1625368108461613057%7Ctwgr%5Ebfddd921861e4f88001269823af861be3ffd793c%7Ctwcon%5Es1_&ref_url=https%3A%2F%2Fmetro.co.uk%2F2023%2F02%2F14%2Felon-musk-tries-to-force-feed-his-tweets-to-twitter-users-18280663%2F , I have to believe that this is a spoofed source since I don't think that even Elon Musk is that out of touch. I saw a few articles stating that people with verified accounts were able to change their name to Elon Musk and thus get tweets posted as belonging to Elon Musk. Is Twitter unable to stop this problem, even if it only involved people changing their display name to Elon Musk, and what does that say about security on the large social media sites. Are there any minimum standards for identity integrity. submitted by /u/PleaseThinkFirst [link] [comments]

I have been offered an entry-level cybersecurity job in London, and wondering what's a decent salary there, according to the current situation in the industry and the cost of living there. I'm a EU citizen, quite new to cybersecurity (and by no means a seasoned expert), but I also have a few years experience in other type of positions in tech companies, so not really a fully inexperienced worker either. I have: - A BSc in engineering - A MSc in cybersecurity - A 6 month internship in a mid-size cybersecurity consultancy firm (mostly pentesting) - 4 years experience in another tech company (one of the big ones), not related to cybersecurity (most of this time I was managing a technical team but my job was not really technical) - I speak 3 languages, one of them being fluent English. Any info would be highly appreciated, just to make sure they are not lowballing me :D Regards! submitted by /u/BroX111 [link] [comments]

I am having trouble trying to understand FIPS 197 certification. Can any organization apply for this? Say I have a product which uses encryption. Does my product get certified, or is it that I am using certified encryption (FIPS) "WITHIN" my product. submitted by /u/87390989 [link] [comments]

I'm stuying ports and I'm not sure which osi layers represents this following ports: SMB 445 Syslog 514 (i think 4) Imap4 993 Encrypted syslog 6514 Thank you for reading! submitted by /u/MrNoodlesLearns [link] [comments]

Have looked at Umbrella, Zscaler and Netskope, Cloudflare the last one we are gonna look at but anyone using it and have any thoughts especially if having used one of these others? submitted by /u/junkaccount1999 [link] [comments]

HackerOne disclosed a bug submitted by jobert: https://hackerone.com/reports/1874260

I recently participated in the Search Party Capture The Flag (CTF) competition — a global event run by the non-profit organisation, Trace… Continue reading on Medium »

How I geo-located one of the video shooting sites from Miley Cyrus’s hit song, Flowers. This one is the first time I write about how I… Continue reading on Medium »

Los Paste Sites son sitios donde se comparte código y otros datos en forma de texto. Continue reading on Medium »

Even though we offer a huge list of over 230 types of requests, you may still need to enrich your investigation with more information: get… Continue reading on Medium »

Bug bounty hunting is the practice of finding security vulnerabilities in websites, software,… Continue reading on Bug Zero »

Several prompts for hacking with ChatGPT I’ve consolidated with demos. Continue reading on System Weakness »

HTML injection, also known as cross-site scripting (XSS), is a type of vulnerability that allows attackers to inject malicious code into a… Continue reading on Medium »

Password security is an increasingly important topic as passwords are often used throughout the average person’s daily life. With so much… Continue reading on Medium »

Article URL: https://docs.mergestat.com/blog/2023/02/13/open-source-vulnerability-management Comments URL: https://news.ycombinator.com/item?id=34792014 Points: 1 # Comments: 0

Article URL: https://sysdig.com/blog/vulnerability-prioritization-fatigue-developers/ Comments URL: https://news.ycombinator.com/item?id=34791445 Points: 4 # Comments: 0

Article URL: https://seclists.org/oss-sec/2023/q1/92 Comments URL: https://news.ycombinator.com/item?id=34786201 Points: 1 # Comments: 0

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Article URL: https://vulncheck.com/blog/cve-2022-47966-payload Comments URL: https://news.ycombinator.com/item?id=34791132 Points: 9 # Comments: 0

Article URL: https://seclists.org/oss-sec/2023/q1/92 Comments URL: https://news.ycombinator.com/item?id=34786201 Points: 1 # Comments: 0

submitted by /u/sea__tak [link] [comments]

submitted by /u/chicksdigthelongrun [link] [comments]

submitted by /u/Gallus [link] [comments]

攻击者可组合利用CVE-2023-23529和CVE-2023-23514提升权限并逃逸 Safari 沙箱。

Dota 2的玩家注意了，你使用的游戏模式很可能被黑客盯上了。

网络钓鱼专家警告说，随着恋爱诈骗案的飙升，要理智的对待感情生活。

云安全市场需求从以资源为中心转移到以应用为中心，包括应用敏捷交付、快速弹性、平滑迁移、无损容灾等。

Clop 勒索软件组织最近利用 GoAnywhere MFT 安全文件传输工具中的零日漏洞，从 130 多个企业组织中窃取了数据。

Hi. We are looking into unauthorized email sent from our company's systems last week. The email was routed through our internal server machine running mdaemon mail system (lets call the machine 172.22.22.22) to our external mail server (73.33.33.33) and from there to a gmail address. Ofc these are not real IPs. The person whose account was used to send the email swears he did not send it. In fact he is the one who notified us when he noticed the unrecognized email in their sent box. Also the email contains "sent from my galaxy" footer, and this person does not own any samsung/galaxy devices. So I want to identify which device/client exactly connected to 172.22.22.22 to initiate the mail. Our firewall application logs don't record anything beyond 2 hours. Any sniffer logs seem to be not recording anything AT ALL. While we fix these problems, any chance I might get a list of IPs that connected to the server at the time of email anywhere else? submitted by /u/saadjumani [link] [comments]

This blog post focuses on the Assumed Breach Assessment approach with an assessment case study performed by the WSA team. But first, Continue reading on Medium »

Secure Shell (SSH) is a secure network protocol that is widely used for remote administration of computers, data transfer, and connecting… Continue reading on Medium »

submitted by /u/dmchell [link] [comments]

The military has a couple of adages...one, "you fight like you train", and another being, "the more you sweat in peace, the less you bleed in war." The idea behind these adages is that progressive, realistic training prepares you for the job at hand, which is often one performed under "other than optimal" conditions. You start by learning in the classroom, then in the field, and then under austere conditions, so that when you do have to perform the function(s) or task(s) under similar conditions, you're prepared and it's not a surprise. This is also true of law enforcement, as well as other roles and functions. Given the pervasiveness of this style of training and familiarization, I would think that it's suffice to say that it's a highly successful approach. The way DFIR CTFs, while fun,…

submitted by /u/L4Z3R_H4WK [link] [comments]

Im examining a Omen HP laptop, that had one M2 SSD and one HDD for storage. What would be the reasoning that a .LNK discovered on the HDD that points to the C: drive? The .LNK file of interest points back to C:\Users*target*. This user name differs from the one currently on the OS drive. submitted by /u/comoestasbitcheZ [link] [comments]

Where can I study cleanroom hard drive repair? I'd like to start with repairs and data recovery, but I can't find anything. They asked me 4200 Euros for a 3-day course, but I can't afford this expense submitted by /u/Zipper_Ita [link] [comments]

This is a bit of a weird and open ended question - but how do people find working in digital forensics who have been employed in this role for a while? Particularly in a law enforcement setting - rewarding? Difficult? Pros and cons? Training?Thanks all submitted by /u/OkGrape5530 [link] [comments]

I think the title speaks for itself :) submitted by /u/herbertisthefuture [link] [comments]

I noticed on my ATT router that I received several ICMB Echo Requests and general discards from an IP belonging to Tenable. Tenable is basically a vulnerability tester right? Could someone be using Nessus or something else to target me? 10 times this IP was logged, a few times for echo request and discards for the other. UDP TCP and ICMP Am I crazy or is this indicative of someone basically pen testing my home network? Thanks for your time submitted by /u/themostofpost [link] [comments]

With things heating up in Eastern Europe and China both countries it seems like it would be inevitable that we would have to deal with direct confrontation with Russia and China eventually. Being that both countries are not only nuclear superpowers but also have cyber capabilities I am coming to wonder what it would look like in the cyber sphere when that confrontation happens? submitted by /u/milesofjoy87 [link] [comments]

I keep a LinkedIn account, with my name, all of the privacy settings set to maximum, except for hibernation. It is intentionally difficult to find. I pay for LinkedIn Premium to get insights into whom searches for me. I use this account as a "canary" to detect when people are trying to look me up. Activity on the account is relatively low. Recently, I was overwhelmed by 50 accounts in the space of only one hour. Most accounts were sock puppets, using private or semi-private modes. The results from linkedin of whom visited my profile were as follows: Someone on LinkedIn Someone at Big Company Business Owner from Atlanta Metro Region Doctor at Saint Fictious Hospital I'm working to identify who viewed me. Tiny companies are generally easy, the results of "Someone on LinkedIn" are not findable. LinkedIn's normal user search tools are not sufficient for entries such as "Doctor at Saint Fictious Hospital." What OSINT tools specific to LinkedIn would you recommend to better search LinkedIn profiles, besides Google, or LinkedIn itself? Any decent recruiter / lead style tools? Paid and unpaid tools are both viable options. submitted by /u/opethharlequinforest [link] [comments]

Hi guys, I don't know where else to ask but I was working on a project and clicked on a random website that instantly closed. I checked virustotal and it came up safe with 0/90, then booted up my VM to check what the website was doing and there was nothing suspicious, no weird calls or communication, no files downloaded, so I was wondering if there's anyone who can check the website for me in case I missed something because I'm curious why it immediately closed without me doing anything but I can't recreate it anymore.Update mid posting: I clicked on it from google link originally and tried doing it again on my VM and it seems to redirect me to a website called illuminatelocks which seems to just redirect like 3 times till finally landing on a random page but on my VM it isn't auto closing. Checking the firefox network tab nothing is downloaded but just to make sure can anyone give me a second opinion? I can provide links if needed. Thank you in advance. Update: After a while I tried to find the google result and I can't seem to find it anymore, and with the google irl it's no longer redirecting me to illuminatelocks but rather staying on the original page this time. submitted by /u/al_ce [link] [comments]

So one of my phones iPhone6gwas draining its battery ridiculously fast so I got some logs. Came across a file with this inside… What do you think? S Treatmentios-feature-remoteconfiguration2remoteconfig_unauth_system_test@ߐ@ F Treatmentios-feature-unauth2remoteconfig_unauth_system_test@��@ J Blue*ios-feature-remoteconfiguration2button_color_dummy_property@��A *ios-feature-carplayv22siri_alternate_search_results@��B¿ګ�0$38e8835e-95e0-5030-9469-bd022815fffc submitted by /u/Accomplished-Paper81 [link] [comments]

There is this Variation of the Vigenère cipher which contains special characters([|'/<) as well instead of normal alphabets(A-Z). How to decrypt it in plain text? submitted by /u/Somechords77 [link] [comments]

So I'm thinking of trying to become either a penetration tester or cybersecurity engineer. Right now I'm most of the way through HTB Academy's InfoSec Fundamentals path but I have A+ and CCNA certifications and I'm working on practice tests for Sec+. I know I don't want to do incident response. My question is do any cybersecurity jobs NOT require me to have to get up arbitrarily at 3AM? If so, which ones? submitted by /u/notburneddown [link] [comments]

submitted by /u/irckeyboardwarrior [link] [comments]

submitted by /u/TheCyb3rAlpha [link] [comments]

submitted by /u/DH_Prelude [link] [comments]

submitted by /u/albinowax [link] [comments]

Stripe disclosed a bug submitted by d_sharad: https://hackerone.com/reports/1717650 - Bounty: $250

Twitter disclosed a bug submitted by eissen5c: https://hackerone.com/reports/1015373 - Bounty: $560

U.S. Dept Of Defense disclosed a bug submitted by spell1: https://hackerone.com/reports/1860905

The bug that is being written about here is from an previous bug bounty engagement for a major telecommunication company. Continue reading on InfoSec Write-ups »

The bug that is being written about here is from an previous bug bounty engagement for a major telecommunication company. Continue reading on Medium »

High severity bug discovered by white hat hacker through bounty platform Immunefi Continue reading on Balancer Protocol »

As a seasoned bug bounty hunter, I can tell you that the world of cybersecurity is constantly evolving, with new vulnerabilities and… Continue reading on Medium »

Hi guys, This is my first article. As a bug bounty hunter, navigating the vast and complex world of cybersecurity can often feel like… Continue reading on Medium »

Bug bounty programs are platforms that are created by ICT-related companies which allow non-biased computer error hunters/ hackers to… Continue reading on Bug Zero »

The world of bug bounty hunting is constantly evolving and with the advancements in technology, the role of Artificial Intelligence (AI)… Continue reading on Medium »

Bug bounty hunting is a lucrative and ever-growing field in the world of cybersecurity. With more and more organizations offering bug… Continue reading on Medium »

Bug Bounty atau BugHunter adalah seseorang yang memahami banyak ilmu dibidang cybersecurity dan cukup berpengalaman dalam menemukan… Continue reading on Medium »

Bug bounty hunting has become a lucrative and exciting field, attracting hackers and security enthusiasts from all over the world. The… Continue reading on Medium »

Last weekend I took part in a capture the flag (CTF) competition run by Trace Labs — a crowd-sourced non-profit organisation to help… Continue reading on Medium »

Today is my 30 on this journey we are going to solve the CTF named Searchlight this time there is no use of terminal : ) Continue reading on Medium »

This weekend I participated in LA CTF 2023, which went on between 11 Feb. 2023, 04:00 UTC —  12 Feb. 2023, 22:00 UTC.This blog post… Continue reading on Medium »

This entertaining article will show you how to generate geographical information about a phone number using “Phonenumbers” in Python. Continue reading on Medium »

Shodan finds an FTP anonymous vulnerability in my organization and allows anyone to log in to an FTP server without a username or… Continue reading on Medium »

how to gather essential information about a company. From physical intel to identifying infrastructure assets, we’ll cover it all. Continue reading on Medium »

By now we should all be (more or less) aware that the internet can be a dangerous place and sharing personal information might not always… Continue reading on InfoSec Write-ups »

OSINT (Open Source Intelligence) is the process of finding relevant information of an asset through open source information. This is… Continue reading on Medium »

Two OSINT geographical quizzes that i solved recently. Continue reading on Medium »

submitted by /u/TheCyb3rAlpha [link] [comments]

submitted by /u/glum-platimium [link] [comments]

https://badoption.eu/blog/2023/02/12/S4B_Teams.html A conglomeration about techniques for S4B and Teams and risks. Nothing really innovative, but as this works so often in the real world just wanted to rise the awareness for this. submitted by /u/PfiatDe [link] [comments]

Hi guys, This is my first article. As a bug bounty hunter, navigating the vast and complex world of cybersecurity can often feel like… Continue reading on Medium »

Threat hunting is a proactive security technique that actively searches for potential threats and vulnerabilities within a network. This… Continue reading on Medium »

本文介绍了一种从攻防两个维度研究分析网络安全对抗技术的方法。

-发现和利用NFS的错误配置 - 通过Linux命令行管理用户 - 利用X11的系统

俄罗斯媒体报道称，杜马信息政策委员会主席亚历山大·欣施泰因宣布，俄罗斯政府正在评估以免除惩罚的方式对待为莫斯科利益行事的黑客。

研究人员发现Python软件包索引（PyPI）中存在四个不同的流氓软件包。

网络安全专家提醒受影响的患者应注意网络钓鱼攻击、诈骗、社会工程或使用被盗数据的勒索。

通过本文，读者可以0源码基础的初步学习spring源码，并能够举一反三从此进入源码世界的大米！ 由于是第一次阅读源码，文章之中难免存在一些问题，还望包涵指正！

2月12日晚间，Telegram某机器人泄露出国内45亿条快递信息，数据包大小达435GB！

中睿天下联合CAC邮件安全大数据中心发布《2022年第四季度企业邮箱安全报告》。

目前 Sliver 已经成为仅次于 Cobalt Strike 和 Metasploit 的第三大 C&C 框架，针对性的检测也已经成为热点话题。

英国和美国政府9日对七名俄罗斯国民实施了制裁，因为他们与TrickBot，Ryuk和Conti网络犯罪行动有联系。

2023年国家自然科学基金安全领域部分题目列表 by ourren Tailscale在内网渗透中利用的研究 by 路人甲 VirusTotal 版本的引擎与桌面版引擎的比较分析 by Avenger SecWiki周刊（第467期) by ourren 更多最新文章，请访问SecWiki

2023年国家自然科学基金安全领域部分题目列表 by ourren Tailscale在内网渗透中利用的研究 by 路人甲 VirusTotal 版本的引擎与桌面版引擎的比较分析 by Avenger SecWiki周刊（第467期) by ourren 更多最新文章，请访问SecWiki

According to a report by Verizon, 32% of all data breaches involve phishing. In this article, we will see how to spot phishing emails and… Continue reading on InfoSec Write-ups »

No content preview

In this article, we will look at OWASP and the top 10 web application vulnerabilities from OWASP. This is a useful topic for both web app… Continue reading on InfoSec Write-ups »

According to a report by Verizon, 32% of all data breaches involve phishing. In this article, we will see how to spot phishing emails and… Continue reading on InfoSec Write-ups »

No content preview

In this article, we will look at OWASP and the top 10 web application vulnerabilities from OWASP. This is a useful topic for both web app… Continue reading on InfoSec Write-ups »

According to a report by Verizon, 32% of all data breaches involve phishing. In this article, we will see how to spot phishing emails and… Continue reading on InfoSec Write-ups »

No content preview

In this article, we will look at OWASP and the top 10 web application vulnerabilities from OWASP. This is a useful topic for both web app… Continue reading on InfoSec Write-ups »

Hi all, I don’t know if this is the right place to post this but here goes: I want to share my media library to guests who occasionally connect to my network via wifi so they can watch what they want on their own devies, basically sharing my library without the need to share login credentials to them one by one. I was thinking that the most elegant solution would be to host a local website (currently trying to make one in localwp) which has an index of my library. How would I go about making an index of my hard drives as if it were open directories? submitted by /u/louiestonanto [link] [comments]

Because I just did and after i left the website I went to Google something and I got redirected to an error page that said "unusual traffic from your computer network." Granted my VPN was being really glitchy and disconnecting then reconnecting then disconnecting etc... Could that have been why I got an error page? When I'm streaming or ripping from illegal streaming sites I always do but I just discovered filepursuit and thought "this seems pretty straightforward." Should I use one? submitted by /u/Throwaway19992003 [link] [comments]

Do you know any light parser-visualisator for SSH debug mode? submitted by /u/athanielx [link] [comments]

When I typed the code *#21# into my keypad, it came back as "call forwarding unconditionally" while then showing voice, data, etc as "not forwarded". What does this mean, and what exactly is being forwarded, and to where? submitted by /u/ExitNo9158 [link] [comments]

I do what I've come to understand is called "threat hunting", and I know there are agreed upon templates for disclosing vulnerabilities for hackers, but what about after the fact? How do you properly with authority inform website owners that the security (or lack thereof) of their site or app had been breached? What I've done so far is simply to describe the IOCs and add my best guess in terms of entry point. As you might imagine, it's totally ignored 95% of time. submitted by /u/C0ffeeface [link] [comments]

We have very small network ...desktop + chromecast and couple of smart phones all on wifi currently have R6250 router and want to upgrade ...someone suggested firewall plus vpn router but I am not sure what should we do ? if you also suggest physical firewall and vpn router ..please give us model no. of your choice is it possible to get both firewall and vpn router in one device ? also even if we have VPN router - we need third party service like Nordvpn or similar correct? submitted by /u/curiosityv [link] [comments]

I realize there are some reasons for wmi on servers, but do workstations have any good reason to be able to reach wmi ports? submitted by /u/Outrageous_Dot_1113 [link] [comments]

Hi guys i am looking for free resource to learn Exploit Development such as AV Bypass, etc. can anyone help me or give me a proper guide on how to learn it. submitted by /u/geeky_gopher [link] [comments]

Today my friend sent me a link to download a program via mega, but before downloading it I checked the file through VirusTotal, in which it checked all the files present as 'safe', except for one: ESTsecurity. In the brief research I did I discovered that it was an antivirus, even indicated by some people. But why would an antivirus be in a program download and why would it be insecure? submitted by /u/3tigrestristes [link] [comments]

Table Of Content Continue reading on Medium »

Table Of Content Continue reading on Medium »

2FA simple bypass - PortSwigger Lab Walkthrough Continue reading on System Weakness »

Hi this is Basavaraj back again with another writeup on SSRF. Continue reading on Medium »

Hackers have a superpower “Observation” but it doesn’t come naturally, a hacker gains it with experience and brainstorming but as… Continue reading on System Weakness »

In most web applications, there is a high prevalence of misconfiguration problems, particularly with regard to authorization. Continue reading on Medium »

Web 1.0 is the term used for the earliest version of the Internet & its all about fetching and reading the data Continue reading on Medium »

Google hacking, also named Google dorking, is a hacker technique that uses Google Search and other Google applications to find security… Continue reading on Medium »

Continue reading on Medium »

I am looking for the most recent version of raptor. For the life of me I can not find a download page. I have read that ownership of the software has switched hands quite a few times. Any help appreciated, thanks. submitted by /u/Novel-Damage2050 [link] [comments]

I'm a computer security enthusiast and aspiring malware developer looking for some guidance and resources. Can anyone point me in the right direction for some free resources to get started with malware development? Bonus points if you can throw in a roadmap for me to follow! Thanks for your help, I'm looking forward to learning from all of you! submitted by /u/AcidOP_69 [link] [comments]

Ada berbagai sumber yang dapat digunakan untuk pengumpulan informasi OSINT, namun tidak terbatas pada media sosial, mesin pencari, dan… Continue reading on Medium »

Discover the valuable lessons learned from the 10th edition of the OSINT Techniques Continue reading on Medium »

Summary of the espionage-related news stories for the Week 6 (February 5–11) of 2023. Continue reading on Medium »

Let’s talk about finding IP cameras and gaining access to them… The following description is not a guide to action and should not be used… Continue reading on Medium »

As we approach the first anniversary of the 3 day Special Military Operation, we thought we’d take a closer look at some of the more… Continue reading on Medium »

submitted by /u/Idov31 [link] [comments]

submitted by /u/NemanjaVas [link] [comments]

submitted by /u/Gallus [link] [comments]

ZKP in Hidden Order Group 未知阶群内的零知识证明 by ourren 某运营商外网打点到内网横向渗透的全过程 by ourren 2022全国微信泄密典型案例 by ourren ChatGPT 对网络安全的影响 by ourren ChatGPT在安全运营中的应用初探 by ourren 程序执行痕迹进行取证的多种方式 by ourren 更多最新文章，请访问SecWiki

ZKP in Hidden Order Group 未知阶群内的零知识证明 by ourren 某运营商外网打点到内网横向渗透的全过程 by ourren 2022全国微信泄密典型案例 by ourren ChatGPT 对网络安全的影响 by ourren ChatGPT在安全运营中的应用初探 by ourren 程序执行痕迹进行取证的多种方式 by ourren 更多最新文章，请访问SecWiki

submitted by /u/tbhaxor [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Para esta primera parte se hara una serie de acciones para identificar posibles brechas de seguridad en el entorno de laboratorio, entre… Continue reading on Medium »

https://tokyokinky.com/blog/wp-content/uploads/ https://www.bdsmtw.com/wp-content/uploads/ submitted by /u/False-Celebration930 [link] [comments]

OneNote 文件原本很少被滥用，但最近攻击者开始青睐该类文件。最初只是一些小规模的恶意软件攻击，现在 Qakbot 也加入进来。

Hook 恶意软件家族已经被研究人员列为高危恶意软件行列，它的出现也将会助推 Ermac 家族的传播更进一步。

What knowledge sources can provide information regarding protecting data backups against ransomware attacks as it concerns * state of the art * trends how it apparently is going to change short and middle term ? Addressed are those of organizational as well as technological domain measures delivering highest gain among all those practiced. submitted by /u/Biyeuy [link] [comments]

First of all before I bore you, apologies if this is not the right place. I'm extremely new to this, so if not, could you kindly point me in the right direction? Thanks ​ OK so I've no real real to be paranoid or anything but wanted a project and so I'm trying to live as reasonably secure as possible. With obvious things like not posting things online aside, how vulnerable am I from either attack, or from being traced? Here's the early days system I'm hoping to get tips on: - Decoy main windowd main install to 1 TB ssd in comp. No personal info, never user except to dowload a few isos. - Full encryption linux mint install on USB drive thats regularly removed. This is the thing I'm concerned about securing. Mulvad VPN set up with lockdown mode + kill switch. Then I use virtual machines from within this and regularly delete/create to cut down on just using one. Do these VMS add anything inbetween? ​ I'm a total noob so help, more relevant communities or documentation would all be greatly apprecated. submitted by /u/Middle-Chef5488 [link] [comments]

Hey guys, I'm studying for CompTIA and some questions are related to TCP and UPC. They make some scenarios like "What if a got a lot of TCP packets in one direction, but empty in the other". I'd like to know how you daily analize this kind of protocols. For example, if you got a lof of TCP packets from a IP you don't trust what would you look? Also, When it's a good option to look UDP packets and analyze them? If you hand some idea of what I'm asking and you can further explain some scenarios, would be very welcome. submitted by /u/MrNoodlesLearns [link] [comments]

I work in a rather big company, and we are trying to increase the visibility in our AWS. Our IDS supplier has a module for it, but when the time for implementation came they asked us to open port 443 outbound to *.amazonaws.com from our IDS master in our datacenter. For me, that sounds like a huge risk. The supplier has made a big effort to tell me that this is best practice. So asknetsec, what is your take on this? submitted by /u/patsve123 [link] [comments]

Hi, Do you know any courses based on the topic "ELK for Security Engineers"? I know one cool cource which I bought https://www.networkdefense.io/library/elk-for-security-analysis-28074/about/ But I took it when there was old ELK and with the new 8.6, a lot has changed. For example, the appearance of the Elastic Agent, in many places the UI has been changed and an unprepared user needs additional efforts to understand where to press the right button. Also, I found this https://georgebridgeman.com/ where this dude explains a lot of things about ELK, but not from security perspective which is not what I'm looking, but it's interesting to listen to better understand ELK. submitted by /u/athanielx [link] [comments]

Just a general question that i'm stumped on. When opening this conversation on wireshark and nfdump there is a difference between bytes reported. Why is that so? https://imgur.com/a/EdUyXOg submitted by /u/reckless_boar [link] [comments]

Could you recommend any courses that are worth taking to understand more about cybersecurity in Windows? I want to gain the knowledge that will allow me to better organize and develop security in Windows envirement. Because right now, everything is rather chaotic and my knowledge of cybersecurity in Windows is selective. I am not interested in courses where there are a lot of dry information, I am more interested in knowledge where lecturer will share some insights what to do with this information and how to do it. My start point is: https://learn.microsoft.com/en-us/certifications/browse/?roles=security-engineer&resource_type=certification I've taken courses there before, and they seemed pretty basic to me. It's not what I'm looking for. But maybe I'm wrong, because the sample is very small. submitted by /u/athanielx [link] [comments]

intext:"Search Term" intitle:"index.of./" (bmp|gif|jpg|png|psd|tif|tiff) -inurl:(jsp|pl|php|html|aspx|htm|cf|shtml) Very useful. But sometimes I don't have an EXACT phrase. But for the life of me, I cannot find any way to use allintext in this string and get results. Is there really no alternative to using intext for every single search term individually? submitted by /u/OHOLshoukanjuu [link] [comments]

https://www.quizmasters.biz/DB/Audio/Tv%20Themes/Mp3/ http://foto.teoteater.ee/muusika/all-time%20top%20100%20tv%20themes/ ​ ​ submitted by /u/Waste-Release-6235 [link] [comments]

Well whenever I have to download I use [ wget -r -np -P F:\ ] . is there any other command that can be use or improve the process? UPDATE I changed the command and it kinda sped upto 500 kbps I used [ wget -r -np -t 1 -A jpg,png,jpeg -P F:\ ] helps with .html and txt files not getting downloaded. jpg, png,jpeg are file extensions I wanted to download, you can use any of file extension you like to download from OD i.e. html, txt, gif, mp4, mp3 any you want and there is no space between commas. submitted by /u/False-Celebration930 [link] [comments]

Hi everybody, our story today will be about how I was able to get a Full account takeover on HubSpot Public Bug Bounty Program at Bugcrowd… Continue reading on Medium »

1.Tamper Data 2.Hack Bar 3.Live HTTP headers 4.User-Agent Switcher 5.Flagfox 6.Domain Details 7.Cookie Manager+ 8.HttpFox 9.XSS Me… Continue reading on Medium »

Um controle de subdomínio ocorre quando um invasor obtém controle sobre um subdomínio de um domínio de destino. Normalmente, isso acontece… Continue reading on Medium »

Hey Comrades, Continue reading on Medium »

I have recently looked into bug bounty programs and decided I would write a blog, however I also wanted to have some fun with this and… Continue reading on Medium »

Introduction Continue reading on Medium »

Here’s What We Found Continue reading on Medium »

Multi Factor Authentication Continue reading on System Weakness »

One of the most intriguing aspects of cybersecurity is the possibility for any freelancer to be involved in “bug bounties”. Continue reading on Medium »

What happened with Bug Zero? Continue reading on Bug Zero »

Hello friends. I hope you are well, I am MR_NETWORK. Continue reading on Medium »

So this write up for Sector035's challenge is going to be my first attempt at solving an OSINT quiz for the OSINT Dojo’s Student I badge… Continue reading on Medium »

Olds will appreciate. Let’s talk today about the use of audio fixation tools during investigations… The following description is not a… Continue reading on Medium »

Reverse image search is a technique that allows you to search the internet for similar images based on a sample image. This can be useful… Continue reading on Medium »

APT stands for Advanced Persistent Threat. It refers to a type of cyber attack carried out by a group of skilled hackers who are typically… Continue reading on System Weakness »

This update focus on licensed professional search and .my whois record Continue reading on Medium »

No content preview

No content preview

Use ChatGPT to turbo-charge your cybersecurity processes Continue reading on InfoSec Write-ups »

No content preview

No content preview

Use ChatGPT to turbo-charge your cybersecurity processes Continue reading on InfoSec Write-ups »

No content preview

No content preview

Use ChatGPT to turbo-charge your cybersecurity processes Continue reading on InfoSec Write-ups »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

This story is going to be about a Red Team engagement conducted on a big fashion brand that is owned and ran by a small family in India… Continue reading on InfoSec Write-ups »

This story is going to be about a Red Team engagement conducted on a big fashion brand that is owned and ran by a small family in India… Continue reading on Medium »

这篇文章将继续对一些后门技术进行分析利用，希望可以对大家的学习提供一些帮助。

本文介绍了Hack-A-Sat黑掉卫星挑战赛的 寻找阿波罗导航计算机中被修改的PI（apollo_gcm）这道赛题的解题过程。

submitted by /u/tbhaxor [link] [comments]

submitted by /u/dwisiswant0 [link] [comments]

submitted by /u/InH4te [link] [comments]

submitted by /u/louis11 [link] [comments]

I am studying for the CHFI exam, does anyone have any pointers and or study tips. submitted by /u/Snoo30695 [link] [comments]

submitted by /u/hisxo [link] [comments]

submitted by /u/jat0369 [link] [comments]

submitted by /u/lukeberner [link] [comments]

submitted by /u/splinter_code [link] [comments]

submitted by /u/OwnPreparation3424 [link] [comments]

submitted by /u/oldboy21 [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/SkylightCyber [link] [comments]

submitted by /u/dwisiswant0 [link] [comments]

submitted by /u/endless [link] [comments]

submitted by /u/dudewithoneleg [link] [comments]

this directory is what seems to be a plenty of pokemon related archives, doujin (sfw), fan art, illustrations scans from mangas in many languages, posters from the pokemon TCG and even photo of the authors signing stuff. there is a plenty here, I hope you enjoy. submitted by /u/math_001 [link] [comments]

Found it but didn't checked all the zipped files, the one I checked seems to be SFW. http://manga.megchan.com/doujinshi/ submitted by /u/math_001 [link] [comments]

submitted by /u/deadjdona [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

,or how reading the html code w/ care lead to rce through file upload Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

,or how reading the html code w/ care lead to rce through file upload Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

,or how reading the html code w/ care lead to rce through file upload Continue reading on InfoSec Write-ups »

No content preview

,or how reading the html code w/ care lead to rce through file upload Continue reading on InfoSec Write-ups »

This is a vulnerability I reported back in April, 2022 Continue reading on Medium »

At Immunefi, we have a simple catchphrase: excellent bug reports lead to excellent payouts. Continue reading on Immunefi »

Hi fellow hunters, in this write-up, I will explain how I found a reflected cross-site scripting bug and showed multiple attack scenarios. Continue reading on Medium »

Nos últimos anos várias empresas como a Microsoft, Google e Meta ofereceram recompensas para quem encontrasse vulnerabilidade em seus… Continue reading on Medium »

We are thrilled to announce a new partnership between two of the leading companies in the security industry: Credshields and Capture The… Continue reading on Medium »

Hi all. I'm trying to set up Teams notifications whenever I assign an incident to a group (distribution group in Azure AD I think). I know that I can set up an automation rule to run a playbook with notification on incident change trigger (owner change). However I didn't find out how to trigger the notifications ONLY when the owner is that particular group. If I set it up like I described, every single owner change would produce a message in the Teams since you cannot filter on particular owners in the automation rule. Am I missing something? The playbook works fine, I just have to figure out how to trigger it only and only with owner being that particular group. I'd be happy with any ideas you might have. Thank you! submitted by /u/FreakySeahorse [link] [comments]

Just curious (learning) if this can even be detected. Like when you hear about these large hacks. They seem to be replicating (?) Company data to their own servers (like Sony, HBO, Experian, etc). Is this something that can't be detected since the hackers on a VPN on their network or logged in as one of their users? submitted by /u/SmarterTogether [link] [comments]

If you had a compromised PC, is it possible for the malware to attach itself to executables or bios/firmware so that when you flash your bios it could get infected? Or is that really not possible given the general malware couldn’t possibly know how to exploit your firmware even if it attaches to it? (Adding meaningless data to your files that doesn’t amount to anything even if you flash it) submitted by /u/cloud12348 [link] [comments]

We host our company website on secure third party servers and I (web designer and site security novice) discovered we have a blank website on one of our subdomains, but realized we’re hosting A TON of client deliverables and IP in the root folders that are being accessed by us and our clients through FileZilla. IT seems to be fine with it, but I’ve never heard of this practice in my line of work and have no idea if it’s secure in the context of website management. Are there any recommended alternatives? Many clients have firewalls that block file sharing on Google, so this was apparently the solution. submitted by /u/Aware_Cheesecake_550 [link] [comments]

Norton 360 has quite a bit to offer with its firewall, browser extension and malware database, but their pricing model is out of hand. These days, is there anything free that can offer the same amount of protection? Thank you submitted by /u/MattJaccino [link] [comments]

I have a ubuntu server on a linode VM that I use as an endpoint for some of my services. I have ufw in place, and I only have it allow my ssh port, 80/443, and my authelia port. I have portainer running in a docker container, and when I go to the IP and port of the VPS, even though I have that port set to deny, ufw is enabled and even after a reboot, I can still get to it. Is there something I'm doing wrong? The port shows open when I go to a portchecker site, but `ufw status` shows it as dropped and firewall enabled. submitted by /u/BelugaBilliam [link] [comments]

Article URL: https://portswigger.net/daily-swig/deserialized-web-security-roundup-keepass-dismisses-vulnerability-report-openssl-gets-patched-and-reddit-admits-phishing-hack Comments URL: https://news.ycombinator.com/item?id=34741895 Points: 1 # Comments: 0

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

John the Ripper is a password-cracking tool that can crack hundreds of hashes, ciphers, and even password-protected files. Continue reading on Medium »

Continue reading on Medium »

Can sanitizers find the two bugs I wrote in C++? https://ahelwer.ca/post/2023-02-07-cpp-bugs-sanitized/ Continue reading on Medium »

Continue reading on Medium »

Can sanitizers find the two bugs I wrote in C++? https://ahelwer.ca/post/2023-02-07-cpp-bugs-sanitized/ Continue reading on Medium »

HackerOne disclosed a bug submitted by syjane: https://hackerone.com/reports/1826141 - Bounty: $500

EXNESS disclosed a bug submitted by ashwarya: https://hackerone.com/reports/1829170 - Bounty: $200

Nextcloud disclosed a bug submitted by lukasreschke: https://hackerone.com/reports/1720043 - Bounty: $750

8x8 Bounty disclosed a bug submitted by ex0dus-0x: https://hackerone.com/reports/1692603 - Bounty: $777

Nextcloud disclosed a bug submitted by obitorasu: https://hackerone.com/reports/1702864 - Bounty: $250

Article URL: https://fuzzingweekly.medium.com/can-sanitizers-find-the-two-bugs-i-wrote-in-c-fuzzing-weekly-cw6-f85469e0d787 Comments URL: https://news.ycombinator.com/item?id=34738080 Points: 1 # Comments: 0

本篇文章仅针对 Monkey Drainer 团伙的部分钓鱼素材及钓鱼钱包地址进行分析。

我们总结推荐了本周的热点资讯、安全事件、一周好文和省心工具，保证大家不错过本周的每一个重点！

一项针对亚马逊网络服务（AWS）用户登录信息的钓鱼活动将网站隐藏在谷歌搜索中，以窃取用户的登录凭据。

美国国家标准与技术研究所（NIST）宣布，名为Ascon的认证加密和散列算法系列将成为标准算法，用于轻量级密码学应用。

聊聊安全离不开的SIEM/SOC需求，以及如何看待K8s无用论。

攻击者使用了一种针对 Reddit 员工的网络钓鱼诱饵，通过冒充其内部网站的登陆页面窃取员工账户凭证。

API也是企业数字化业务的基础，在企业数字化转型的浪潮中，它成为黑客和恶意攻击者的首要目标。

OSINT is a process of gathering information from publicly available sources to be used in an intelligence context. In the digital age… Continue reading on Medium »

OSINT has become a bit of a buzzword, whilst becoming more blurred on whats actually classified as open source intelligence. Today we’ll… Continue reading on Medium »

If you do any kind of online investigative or research work, then you’re no stranger to the rush of finding hidden information about your… Continue reading on The First Digit »

If you do any kind of online investigative or research work, then you’re no stranger to the rush of finding hidden information about your… Continue reading on Medium »

Open Source Intelligence (OSINT) has become a crucial aspect of modern investigations, providing valuable insights into the digital world… Continue reading on Medium »

Hello, I recently passed OSCP (go me, right?) and was disappointed to learn that the CRTP materials were no longer offered by Pentester Academy. This was the next item on my to-do list that is no longer an option. Does anyone have any information as to why it has been shut down? In addition, because it has been shut down, would anyone be willing to share the materials or their notes with me? I want to read the materials to learn and grow my skillset. Thank you. submitted by /u/tommyleeonetwothree [link] [comments]

In this week's red team tip, I show how to bypass Palo Alto Networks Cortex XDR. Much of this was inspired by what mrd0x released last year. Some major changes in XDR have made many methods not opsec safe. They also added obfuscation to some of the values. https://youtu.be/f1z7wTnD4Z8 submitted by /u/Infosecsamurai [link] [comments]

submitted by /u/lowlandsmarch [link] [comments]

Do you have an authenticated smtp server (port 587 or 465) accessible for everybody on your corporate network? Here we have one for servers use only, but some users are asking to be able to use it in mail clients like outlook or thunderbird. Do you see any problems allowing that? Edit: it's a large corporate network. submitted by /u/PianoConcertoNo1 [link] [comments]

We are trying to implement an EDR or XDR solution with Microsoft 365 Defender or Crowdstrike Falcon Go. I never thought about the cloud environment though. Is it a security practice to deploy agents for Cloud EC2 instances (AWS in our case) Linux OS? submitted by /u/chalreshammer12 [link] [comments]

Hi everybody. I am in the process of interviewing with a Big 4 company for a junior pen tester position. They asked me to have a technical interview in the form of CTF for 3 hours long (Windows Machine). Any recommendations on what to practice and where? Any recommended boxes on Tryhackme or HTB? PS: I am eJPT certified, and I know some stuff in general. I practice in THM a lot, but still I believe that I am just in the beginning. Thank you in advance submitted by /u/apostonikos [link] [comments]

Hi guys, I am based in Jersey, UK. Just passed Sec+, looking to start CREST CPSA then CRT. I have looked online for jobs, but there is not a lot out there for Junior Pen Tester and all the companies ask for experience. Any tips how to land a job after passing CPSA then CRT with no experience. FYI I am on £45K per annum. Thanks in advance submitted by /u/CyberHero86 [link] [comments]

Hello fellow cybersecurity professionals! I'm a PhD candidate in the U.S. studying cybersecurity leadership, and my chosen topic of interest is cyber resiliency -- the ability for a system to withstand negative effects and continue operating critical functions. In short (and in military terms), to take a hit and keep fighting. You can help with this important research! I am seeking participants for my online survey to better understand the innovation-decision process for cyber resiliency, and what influences affect adoption or rejection of cyber resiliency innovations at the organizational leadership level. Participants should be mid-senior level cybersecurity professionals with more than 5 years of field experience. The survey should take no longer than 15 minutes to complete (tested by pilot); you will remain anonymous. There's an option for a live interview at the end, please consider it as it will help enrich the data collected! Link to the survey is here: https://www.surveymonkey.com/r/cyberstudy submitted by /u/hunter281 [link] [comments]

I'm a Mac and Linux user, so almost all the command lines and scripts are based on Unix. I'm learning the basic about Powershell, i'm trying to understand if I can involve on my daily task this shell. For example, I just know it have some homologous commands from Prompt. Something I've used so many time ago and isn't my strong, because like I've said I migrated like 10 or more years to Mac and Linux. Now for general study and research, I'm trying to understand if Powershell it's involved in something important or useful in NetSec. If you have some daily commands or maybe some scripts in Github you use daily or somethings because this shell bring you more efficient, please share with me. Thx! submitted by /u/MrNoodlesLearns [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/DrinkMoreCodeMore [link] [comments]

submitted by /u/lowlandsmarch [link] [comments]

submitted by /u/0xcsandker [link] [comments]

I recently found my first vulnerability in the wild. The vulnerability was a P1 and all I had to do was turn a 0 into a 1. Continue reading on InfoSec Write-ups »

Hello fellas, Continue reading on Medium »

Introductory Networking(OSI,Tools) Continue reading on Medium »

Portswigger’s CSRF lab Simple Solution | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

Introduction Continue reading on Medium »

Broken access control can result in data breaches and security incidents. Find issues by performing threat modeling, security assessments… Continue reading on Medium »

Pwning.eth has earned a third Whitehat Hall of Fame NFT for his critical bug find in Moonbeam, Astar, and Acala on June 27, 2022. He… Continue reading on Immunefi »

A common question nowadays is “How to get started in Bug Bounties?”. So, in this article, I’ll go over a beginner’s bug bounty guide. Continue reading on Medium »

The OSS-Fuzz project by Google increased their rewards. How you earn: integrate OSS-Fuzz into a critical open source project and find bugs… Continue reading on Medium »

Hi folks, Usually I don't do writeups or share anything related to bug bounty. From now I will be sharing my experience and knowledge &… Continue reading on Medium »

I found a folder full of music including japanese songs. I was searching for J-songs and I actually found some, but when I clicked the Parent Directory link it seems that`s actualy a whole lot. this seems jackpot to me, I hope you guys can enjoy it submitted by /u/math_001 [link] [comments]

I'm doing an assignment and have to research the different types of forensic tools and the formats that they use. I'm getting conflicting reports on this though. Is both DD and E01 raw formats? Or is DD the raw format and E01 the proprietary format? submitted by /u/Jumbofato [link] [comments]

What would be your tool of choice if you want to get the most accurate disk image suitable for analysis on a different computer (encryption stripped)? Imagine you do not have any commercial tools at hand, so you need to justify any new purchase. It would be perfect if the tool could preserve as many low-level filesystem artifacts as possible (otherwise I could just dmg/tar/rsync it, right?). aff4 would be a plus, but not a requirement. submitted by /u/arkenoi [link] [comments]

So the results are published in a google doc here Raw Data can be seen here If you want a csv download link lmk I am currently cleaning up the excel document to post if you want more raw data. There was 45 participants, it was a good test run. Will eventually want to make a better survey to try to reach a wider spectrum of DFIR eventually down the road. Any fixes/suggestions/help is appreciated if you want to see a 2.0 version. I know location is a key factor that will need to be addressed. *Update with the raw data / Also don't know who downvoted this but that will make it be seen by less people since it is a 0 now. So be it, put some work into this but though some people would like the results so posted it. submitted by /u/MDCDF [link] [comments]

Hi guys, so as a part of my project I’m building a custom DFIR for various OS’ . I’m writing a python script for all operations. For windows I was a little stuck trying to access the registry hives. So far I’ve tried using regipy and winreg but I keep running into an error stating “permission denied” I read there is a way to access hives through the system account but I’m not sure how far that would be feasible running it on a different system. Any help/insights are really appreciated. Thanks! submitted by /u/Advanced_Reaction596 [link] [comments]

软件供应链安全 2022 年回顾 by ourren 如何写好一篇高质量的IEEE/ACM Transaction级别的计算机科学论文? by ourren ChatGPT研究框架（80页PPT） by ourren ChatGPT概念“狂飙” by ourren 换种思路做入侵检测 by ourren 2022网络空间安全重大项目发展概况 by ourren 更多最新文章，请访问SecWiki

软件供应链安全 2022 年回顾 by ourren 如何写好一篇高质量的IEEE/ACM Transaction级别的计算机科学论文? by ourren ChatGPT研究框架（80页PPT） by ourren ChatGPT概念“狂飙” by ourren 换种思路做入侵检测 by ourren 2022网络空间安全重大项目发展概况 by ourren 更多最新文章，请访问SecWiki

Nextcloud disclosed a bug submitted by aditya404: https://hackerone.com/reports/1820864

If you’ve ever been doing an Internal Penetration test where you’ve reached Domain Admin status and you have a cloud presence, your entire Azure cloud can still be compromised. In this blog, I’ll take you through this scenario and show you the dangers of machine account SSO compromise. We will do so without extracting any... The post Azure AD Kerberos Tickets: Pivoting to the Cloud appeared first on TrustedSec.

This vulnerability on version 2.3.6 and 2.3.7 (fixed in 2.3.8) Continue reading on Medium »

What is the state of the art with phishing in 2023? What techniques do exist, which do still work and what is know-how worth revisiting? Continue reading on SSE Blog »

GOAD es un laboratorio enfocado netamente en el mundo del directorio activo y cuenta con múltiples técnicas disponibles para practicar… Continue reading on Medium »

NIST宣布，名为 Ascon 的经过身份验证的加密和散列算法系列将针对轻量级密码学应用程序进行标准化。

本文整理了31位“一把手”最新名单简历及网信工作精彩观点摘录。

全球最大的三家社交媒体平台遭遇宕机，Twitter、Instagram和YouTube的部分用户无法访问其账户。

分析研判技术网络安全攻击类型暴力破解xss跨站脚本攻击目录遍历恶意通信永恒之蓝勒索病毒权限提升SQL注入文件上传漏洞命令注入挖矿病毒Log4j远程代码执行网络安全攻击危害经济损失和业务损失,黑客的攻击

号称史上最好的Windows系统“Win11”宣布首个正式版21H2将逐渐下线，系统用户将全面升级至22H2。

ChatGPT 的成功引得微软、谷歌等科技巨头眼红，纷纷注重资企图再次入局。

最近复现了一个比较老的洞，因为涉及到密码学相关的攻击，刚好前段时间也在学习通讯协议相关的知识，于是就比较感兴趣。

The OSS-Fuzz project by Google increased their rewards. How you earn: integrate OSS-Fuzz into a critical open source project and find bugs… Continue reading on Medium »

The OSS-Fuzz project by Google increased their rewards. How you earn: integrate OSS-Fuzz into a critical open source project and find bugs… Continue reading on Medium »

submitted by /u/xenonexi [link] [comments]

There was a post [0] recently about the bing chatGPT assistant either citing or hallucinating it’s own initial prompt from the (in theory) low privileged chat input UI they put together. This feels like it’s almost unavoidable if you let users actually chat with something like this. How would we sanitize strings now? I know OpenAI has banned topics they seem to regex for, but that’s always going to miss something. Are we just screwed and should make sure chat bots just run in a proverbial sandbox and can’t do anything themselves? [0] https://news.ycombinator.com/item?id=34717702 Comments URL: https://news.ycombinator.com/item?id=34719586 Points: 83 # Comments: 108

作者：cq674350529 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 前言 2022年11月，SSD发布了一个与NETGEAR R7800型号设备相关的漏洞公告。根据该公告，该漏洞存在于Netatalk组件(对应的服务程序为afpd)中，由于在处理接收的DSI数据包时，缺乏对数据包中某些字段的适当校验，在ds...

作者：cq674350529 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 前言 2022年11月，SSD发布了一个与NETGEAR R7800型号设备相关的漏洞公告。根据该公告，该漏洞存在于Netatalk组件(对应的服务程序为afpd)中，由于在处理接收的DSI数据包时，缺乏对数据包中某些字段的适当校验，在ds...

My last, first article, published here after years of silent reading, received such a positive response I decided to create a more… Continue reading on Medium »

Burrow is proud to announce its new bug bounty program with ImmuneFi, aimed at identifying and fixing potential vulnerabilities in the… Continue reading on Medium »

HackerOne Continue reading on Medium »

Introduction Continue reading on Martian Defense Cybersecurity »

I was doing web pentesting on a private program. The program had a very tough WAF even typing alert as a payload would block be blocked by… Continue reading on Medium »

Openredirection + clickjacking + csrf -> Account Takeover Continue reading on InfoSec Write-ups »

Dear readers, I’m delighted to report that I’ve begun a 100-day challenge at THM to learn more about the topic of cyber security. I’m also… Continue reading on Medium »

I’ve been recently thinking about doing a bootcamp for cyber security. Not sure if this is the place for this but wanted to get some advice on how bootcamps are perceived in the industry. It’s back by UofM and I will have about 400 hrs of hands on experience at the end with decent certs just not sure if not having a degree will keep me from getting a job. Anyone got any insight? submitted by /u/Runnit_son [link] [comments]

What are your personal checklists, perhaps scripts? For example, whether there are admin accounts that have not been used for a long time, whether passwords have been changed in admin accounts, or whether this user really needs to be in a privileged group. P.S. I'm not talking about continuous monitoring of accounts activity. submitted by /u/athanielx [link] [comments]

Hi I'm running my personal VPN/Proxy on a cloud server and I noticed multiple failed TLS handshakes with my server's public IP in the SNI field in my Caddy logs! Is this normal or is it some kind of attack? submitted by /u/__HumbleBee__ [link] [comments]

Google Dorking is a technique used by security researchers and hackers to find vulnerable information and websites by using advanced… Continue reading on Medium »

Open Source Intelligence (OSINT). OSINT adalah proses pengumpulan informasi dari sumber yang tersedia secara publik untuk digunakan dalam… Continue reading on Medium »

Exploring the smoking gun of the Internet — Shodan Continue reading on Medium »

Современные технологии предоставляют множество возможностей для автоматизации различных процессов, в том числе и поиска информации. Одной… Continue reading on Medium »

It is possible to overlay drone footage onto Google Earth as a way to get more contemporary images of an area. Continue reading on Medium »

Article URL: https://github.com/doyensec/CVE-2022-39299_PoC_Generator Comments URL: https://news.ycombinator.com/item?id=34714367 Points: 1 # Comments: 1

Exploring the Devastating Effects and Importance of Implementing Preventative Measures Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

Exploring the Devastating Effects and Importance of Implementing Preventative Measures Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

Exploring the Devastating Effects and Importance of Implementing Preventative Measures Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

SOLVED : THANKS GUYS So I have an .EO1 file that contains a NTUSER registry file in there somewhere, so I opened it on FTK Imager, my question is how could I open that NTUSER registry file in a software such as 'Registry Viewer'? I know how to do it for my own User but this NTUSER is in a .EO1 file. Thank you, I am a few weeks into learning this stuff <3 submitted by /u/kreqex [link] [comments]

Cloud attacks haven’t yet become very sophisticated. In AWS, most of the external attacks are related to resource mis-configurations… Continue reading on Medium »

Tripwire is a virtual machine orchestration tool, designed to supplement Red|Purple|Blue team lab environments. It utilizes VMware… Continue reading on Medium »

SpecterOps has released Ghostwriter v3.2 with some significant enhancements we think you’ll like. We overhauled how you interact with… Continue reading on Posts By SpecterOps Team Members »

In the series, we’re going to cover all the TTP of all the phases of the MITRE ATT&ACK Framework. Continue reading on System Weakness »

In the series, we’re going to cover all the TTP of all the phases of the MITRE ATT&ACK Framework. Continue reading on Medium »

1 Deep Dive into an ESXi Ransomware TrustedSec’s Nick Gilberti wrote a great blog covering the ESXi ransomware’s shell script here. However, in this blog, we are going to dive a little deeper into the code behind this ransomware. The sample ransomware discussed was acquired from VirusTotal and Bleeping Computers forum. The following is a... The post ESXiArgs: The code behind the ransomware appeared first on TrustedSec.

submitted by /u/n0llbyte [link] [comments]

submitted by /u/gfekkas [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/Fugitif [link] [comments]

submitted by /u/jub0bs [link] [comments]

submitted by /u/stashing_the_smack [link] [comments]

submitted by /u/YogiBerra88888 [link] [comments]

XSS, or cross-site scripting vulnerability, is a frequent web vulnerability. Continue reading on Bug Zero »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

印度政府可能会将该政策作为即将出台的“数字数据保护法案”的一部分，该法案可能会在3月份提交。

网络攻击者正在利用向日葵中存在的安全漏洞，部署 Sliver C2 框架，以期进行后续“攻击入侵”活动。

微软在不到两周的时间里遭遇了第二次重大的云服务中断。

LockBit推翻之前未曾攻击皇家邮政的说法，于近日将勒索赎金倒计时条目添加到了数据泄露网站上。

the problem is, it only works if you know the full link to the file, you can't browse. does anyone know a way around this? https://bridge.rabbitsun.xyz/Series/ https://bridge.rabbitsun.xyz/Series/Truth%20Be%20Told%202019/S01/Truth.Be.Told.S01E02.480p.WEB.TagName.mkv submitted by /u/TheCrunchRadio [link] [comments]

Nextcloud disclosed a bug submitted by mik-patient: https://hackerone.com/reports/1708873

Nextcloud disclosed a bug submitted by mik-patient: https://hackerone.com/reports/1720822

Hello all. In trying to make sure I understand how dd works, I made a small disk (sdb), partitioned, formatted, and mounted it in Kali. I loaded some random files and ran xxd -a /dev/disk to see my before state. Then I ran dd if=/dev/zero of=/dev/sdb successfully, and re-ran the xxd command to confirm it was all zeroed out. However, the files I put in the mounted folder were still there. xxd against the partition, sdb1, showed that there was still non-zero content. I wrongly assumed that zeroing the disk would also wipe out the partition. I had to run dd if=/dev/zero of=/dev/sdb1 for everything to be wiped. Can anyone help me understand why this is, or point me in the right direction so I can do my own reading? Thanks. submitted by /u/not_a_lob [link] [comments]

Foundational concepts to understand before venturing into Linux memory forensics Linux process data structures submitted by /u/DFIRWarlock [link] [comments]

A thing I’ve never seen someone talking about before, how is the job market in Forensic Analysis/Science as being a foreigner? Mostly are government related jobs and i would love to know the problems a foreigner will get through and if it’s even possible to work for other governments. Sorry if it was asked before. submitted by /u/seungles [link] [comments]

This might be a really ridiculous post but I am so desperate, Is there any software that can recover files like exe, that doesn't take a long time to do or download? if it can't recover then that's fine as long as it showed when the file was modified, the name of the file, and the time. Please help!! Will explain more when someone respondes submitted by /u/DanteYo [link] [comments]

These are all considerably more crucial vulnerabilities and are employed in bug bounty programmes.Just add into your list and gather much… Continue reading on Medium »

Find sensitive data in Amazon AWS, Google Cloud, and more Continue reading on InfoSec Write-ups »

Recently, I downloaded and started testing an application locally which provided dashboard access along with rest API endpoints for it’s… Continue reading on Medium »

Hey Guys, I am banti samanta, a Security Researcher and a Bug Bounty Hunter. In this blog, I will be sharing a list of 350+ Free Tryhackme… Continue reading on Medium »

10 Essential Tools used for Reconnaissance | Karthikeyan Nagaraj Continue reading on Medium »

Becoming a “hacker” can mean many different things to different people, so the resources you need to improve will depend on what type of… Continue reading on Medium »

— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — Continue reading on Medium »

Broken Access Control is a vulnerability in which the application fails to enforce access control restrictions and security measures such… Continue reading on Medium »

Bug bounty programs have become increasingly popular in recent years as a way for companies to ensure the security of their websites and… Continue reading on Medium »

The increased prevalence of threat actors targeting hypervisor platforms has only increased over the last few years and the importance of these systems has stayed roughly the same. Why have EDR vendors not began to make agents compatible with at least the major players? This thought has been going through my head for a few months but the recent development of the ESXiArgs presents another example of the need. Here is a some a good blog post that gives some context on the current campaign. https://www.trustedsec.com/blog/esxiargs-what-you-need-to-know-and-how-to-protect-your-data/ submitted by /u/PolicyArtistic8545 [link] [comments]

I am an IP Network Engineer with 5 years working experience as a support engineer in a NOC environment. I am presently struggling to get a job since I completed my MSc. in Networking and Data communications and I am therefore considering adding Cyber security to my list of certifications. I did a module called "Network Information Security" as part of my MSc. program. I was wondering which cyber security certification would be an advancement for my career. I think CISSP is a long way for me. Any advice would be great. submitted by /u/clahws [link] [comments]

In a DNS hunting report, I saw a spike in NXDOMAIN records for a subdomain that I have not yet seen. There were 200+ requests for FQDNs containing subdomain "thissubdomainshouldonlyresolveifwildcard". Example: thissubdomainshouldonlyresolveifwildcard.IPaddress.arpa[.]net thissubdomainshouldonlyresolveifwildcard[.]mydomain thissubdomainshouldonlyresolveifwildcard[.]myseconddomain I searched our EDR but there are no records for this domain and I am not sure what DNS server is replying NXDOMAIN (internal/external). Due to limited logging, I also cannot see which source IPs made the requests. OSINT shows this subdomain is associated with sinkholes... Is anyone familiar with this? submitted by /u/waaz_techpursuit [link] [comments]

I am consulting for a company that typically provides AWS' SOC2 report to potential clients since all their client data is stored on AWS. One prospect says that is not enough and they want one for the company itself in addition to AWS'. They also said that they want a SOC2 for the actual product they are considering purchasing from the company. Is this request overkill? Are all three SOC2 reports a reasonable request? submitted by /u/Tyggger [link] [comments]

As long as you are a security engineer. submitted by /u/IamOkei [link] [comments]

I was told that one of my passwords in chrome had been breached but when I try to go to the website to change it, I am informed that my connection is not private, and then I tried to proceed through and I was met with a 403 - Forbidden Error. How can I change this password, or delete this account to fix this? submitted by /u/gkops [link] [comments]

Hey how's it going? I've recently purchased the TL-WN722N V1 off of someone online. Bought a used one since I wanted to specifically get the V1. Anyway, what caught my eye was the very low price of €10, while it seems that this piece is going for over 50 (second-hand) in the UK/US. My question is - are there any possible ways this device could be tampered with? What are some ways I can monitor it and check it out just to make sure it's all good? Thanks! submitted by /u/Ledinukai4free [link] [comments]

There are a lot of good open source vulnerability scanners out there, but are there any good open source options to collect the results of multiple scanners so that you can decide what to do with them? It seems like all of the commercial options are hidden behind an enterprise pricing level. Comments URL: https://news.ycombinator.com/item?id=34699627 Points: 2 # Comments: 0

Threat Overview Around February 03, 2023, a ransomware campaign called “ESXiArgs” emerged that targeted Internet-facing VMware ESXi servers running versions older than 7.0. Though not confirmed, it has been reported by the French CERT (CERT-FR), BleepingComputer, and other sources that the campaign leverages CVE-2021-21974, which is a three-year-old vulnerability in the OpenSLP component of the... The post ESXiArgs: What you need to know and how to protect your data appeared first on TrustedSec.

TeamFiltration was publicly released during the DefCON30 talk, “Taking a Dump In The Cloud”. Before the public release, TeamFiltration was an internal tool for TrustedSec’s offensive security operations, which was shared internally back in January 2021. In short terms, TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring Office 365 Azure AD accounts.... The post TeamFiltration V3.5.0 – Improve All the Things! appeared first on TrustedSec.

Article URL: https://www.openwall.com/lists/oss-security/2023/02/07/7 Comments URL: https://news.ycombinator.com/item?id=34698264 Points: 1 # Comments: 0

submitted by /u/shaeqahmed [link] [comments]

submitted by /u/guedou [link] [comments]

submitted by /u/mazen160 [link] [comments]

submitted by /u/thorn42 [link] [comments]

submitted by /u/hdtrinh [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/luci_morningstart [link] [comments]

submitted by /u/Machinehum [link] [comments]

Maximizing your study efforts and acing the exam: An in-depth look at the benefits of training with practice questions Continue reading on InfoSec Write-ups »

Implementing zxcvbn for your web app is relatively straightforward, and can provide significant benefits in terms of password security. Continue reading on InfoSec Write-ups »

A bug bounty program is a crowdsourced approach to identifying and addressing security vulnerabilities in a web application. Continue reading on InfoSec Write-ups »

Starting a bug bounty program and hiring a security team are important steps for companies to take to ensure the security and… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Maximizing your study efforts and acing the exam: An in-depth look at the benefits of training with practice questions Continue reading on InfoSec Write-ups »

Implementing zxcvbn for your web app is relatively straightforward, and can provide significant benefits in terms of password security. Continue reading on InfoSec Write-ups »

A bug bounty program is a crowdsourced approach to identifying and addressing security vulnerabilities in a web application. Continue reading on InfoSec Write-ups »

Starting a bug bounty program and hiring a security team are important steps for companies to take to ensure the security and… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Maximizing your study efforts and acing the exam: An in-depth look at the benefits of training with practice questions Continue reading on InfoSec Write-ups »

Implementing zxcvbn for your web app is relatively straightforward, and can provide significant benefits in terms of password security. Continue reading on InfoSec Write-ups »

A bug bounty program is a crowdsourced approach to identifying and addressing security vulnerabilities in a web application. Continue reading on InfoSec Write-ups »

Starting a bug bounty program and hiring a security team are important steps for companies to take to ensure the security and… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Hyperledger disclosed a bug submitted by r3drush: https://hackerone.com/reports/1763343

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

In many instances, the answer is becoming “when” not “if.” Continue reading on Medium »

In many instances, the answer is becoming “when” not “if.” Continue reading on Medium »

Introduction Continue reading on Medium »

Red teams and SOC teams serve different but complementary roles in ensuring the security of an organization’s IT systems and data. Red… Continue reading on Medium »

预计2023年平均每月将有1900个危险漏洞披露，比2022年增长13%，其中高危漏洞270个、严重高危漏洞155个。

因未遵守有关使用cookie的规定，包括数据主体的同意，以及告知个人使用cookie的义务，法国国家信息委员会CNIL对谷歌处以1.5亿欧元的罚款，对Facebook处以6000万欧元的罚款。

勒索软件能够渗透并阻碍一切组织的正常运营，这就是了解勒索软件攻击主要载体的意义所在。

不单单是美国和韩国，勒索软件波及的范围还包括德国、沙特阿拉伯、台湾和日本。

No content preview

该应用程序估计有 3000 名用户，其中包括组织犯罪集团成员。

简历投递邮箱：zhhr@ncbank.cn 。

Xmrig家族挖矿病毒分析，通过对挖矿病毒表现出来的特征采取动态、静态相结合的方法以及差异对比分析的方法对程序的rootkit实现点进行定位分析。

https://badoption.eu/docs/blog/2023/01/31/code_c2.html VSCode has a protable binary, which also allows a reverse shell and some other nice features (File Explorer, Debugging, Local Port Forwarding). Authentication is via Github and hosting iscomplete on MS domains. PS: I am the author, so if there are any questions, or feedback let me know. submitted by /u/PfiatDe [link] [comments]

https://badoption.eu/blog/2023/02/06/spoof_office_comments.html MS Office does not verify comments, as they are stored in the file. Allows spoofing of author and or comments, even crosstenant for AAD. submitted by /u/PfiatDe [link] [comments]

I have OSCP training and web app pentesting experience but I'm new to the red team/purple team type stuff. How do you folks normally set up for assumed breach scenarios? Say you have a client that wants to do an assumed breach purple team assessment of their on-prem domain and you have a cobalt strike server set up. How do you ask them to set up for you? Do you... ask them to set up a machine on the domain and give you creds to it? ask them to turn off whatever protections so you can put a beacon on the machine? just ask for information to vpn to the network? etc. What exactly is the normal way you would do this? submitted by /u/Jumpy_Hamster [link] [comments]

https://drive.google.com/drive/folders/1S-zjW17dRGK3XEi8l1T5bEUHJqMxto5X contains movies, software and tons of learning content. Everything I saw in it was organised. submitted by /u/False-Celebration930 [link] [comments]

the way files can be previewed in google drive , is it possible to do same with any open directory with any extension or something else? submitted by /u/False-Celebration930 [link] [comments]

https://drive.google.com/drive/folders/12IaTHgSgBrr8-NWm6eEaaHhJTiLCNJat submitted by /u/False-Celebration930 [link] [comments]

Hoje, iremos utilizar algumas técnicas relacionadas a OSINT para descobrir as flags do room OhSINT, do THM. OSINT [Open Source… Continue reading on Medium »

So yeah, this is actually my first ever article to write in my Medium, hope I can do more. The sole reason for me doing this is to record… Continue reading on Medium »

So much of what we see in cybersecurity, in SOC, DFIR, red teaming/ethical hacking/pen testing, seems to be predicated on lists. Lists of tools, lists of books, lists of sites with courses, lists of free courses, etc. CD-based distros are the same way, regardless of whether they're meant for red- or blue-team efforts; the driving factor behind them is often the list of tools embedded within the distribution. For example, the Kali Linux site says that it has "All the tools you need". If you go to the SANS SIFT Workstation site, you'll see the description that includes, "...a collection of free and open-source incident response and forensic tools." Here's a Github site that lists "blue team tools"...but that's it, just a list. Okay, so what's up with lists, you ask? What's the "so, what?"  …

Generally Buffers overflow family targets common protocols like HTTP,SMB,FTP,… ; indeed there is lack of papers, tools, exploits targeting financial/payment protocols like NDC and ISO8385. In this article I present two fuzzers for the protocols ISO8385 and NDC; hoping that it will help other security enthusiasts and developers . The goal of these tools is to quickly find/fix security holes like DOS/Buffer Overflows in the code of the ATM/POS service protocols Below the link to the article : https://www.linkedin.com/pulse/fuzzing-atmpos-protocols-like-boss-karim-reda-fakhir/?published=t submitted by /u/kikikoko1983 [link] [comments]

Hey, all. I’m okay versed in computers, but I’m nothing fancy—the extent of my meanderings might be setting up arch Linux in VM or Debian on old laptops I don’t know the password to. Recently my Mac ran into some issues and I believe them to be coming from a USB3 to HDMI cord from amazon. Immediately after plugging in the cord I experienced massive changes in my GUI. The crispness of windows was lost, i had different cursors, and I could resize windows only x and y axis— losing the ability to size diagonally. I was in photoshop at the time and it kept wanting to crash, but before the cord I’d had no problems. Things seemed so funky. The environment was reminiscent of being in a virtual machine or booting an ISO image from a flash drive. After seeing if settings would aid me in returnin…

My Galaxy S20 finally crapped out and I need to get a new phone. I'm deciding between getting a Galaxy S23 or an iPhone 14. They seem pretty comparable with some benefits to both but I was wondering what the general consensus is regarding their security. I know Google is pretty notorious for issues with customer data but my knowledge about this is pretty outdated. Thanks! submitted by /u/MoonlightToast [link] [comments]

Can Google see my HTTPS traffic when using Chrome? submitted by /u/Bored-Giraffe [link] [comments]

Hi folks, Do you have experience with Elastic SIEM (subscription - Free and open - Basic)? What are you finding lacking? Would you recommend using this SEM for? Maybe there are some fanatical Elastic SIEM gurus :) in the community who I could be read on this topic? submitted by /u/athanielx [link] [comments]

submitted by /u/dmchell [link] [comments]

1.) what is open source intelligence: Continue reading on Medium »

Open Source Intelligence (OSINT) has a long history of use in the intelligence community and is a standard tool for security services… Continue reading on Medium »

If your work involves protecting organizations from social engineering attacks, you will most probably also be required to conduct… Continue reading on The First Digit »

If your work involves protecting organizations from social engineering attacks, you will most probably also be required to conduct… Continue reading on Medium »

Open Source Intelligence (OSINT) Analyst adalah seseorang yang memiliki kemampuan, keterampilan, serta daya analisis yang terstruktur dan… Continue reading on Medium »

Yelp disclosed a bug submitted by ilpadrino: https://hackerone.com/reports/1422227

Nextcloud disclosed a bug submitted by supr4s: https://hackerone.com/reports/1746582

Nextcloud disclosed a bug submitted by supr4s: https://hackerone.com/reports/1741525

Nextcloud disclosed a bug submitted by supr4s: https://hackerone.com/reports/1736390 - Bounty: $150

Access control enforces policy such that users cannot act outside of their intended permissions. Failures typically lead to unauthorized… Continue reading on Medium »

As part of the new HAI utility implementation, we’re announcing its extension to HackenProof. Continue reading on Medium »

Start Hunting the Bugs…Not only For Money…For Satisfaction | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

Top 10 Web Application Security Risks Continue reading on Medium »

wants to earn 3 Digit $$$ in 15 Min read. Continue reading on Medium »

The rise of the connected car has brought about many new and exciting innovations to the automotive industry. From advanced infotainment… Continue reading on Medium »

hey all, it’s been a long time since i posted here, and much has happened (multiple p1s on various programs :)). but here we are once… Continue reading on Martian Defense Cybersecurity »

This article in the series contains a high-level overview of different tools and techniques used for automating reconnaissance processes… Continue reading on Martian Defense Cybersecurity »

Acunetix Continue reading on Medium »

One method of controlling network traffic is rate restriction. It limits the number of times someone may take a certain action — like… Continue reading on Medium »

Pada artikel ini, saya akan membahas bagaimana cara “menguji” secara efektif menggunakan metodologi pengujian Black Box. Black Box adalah… Continue reading on MII Cyber Security Consulting Services »

Before I go into the details of my experience with the CRTP certification, I’ll give some background of myself. Continue reading on Medium »

submitted by /u/EatonZ [link] [comments]

在线沙盒的 ATT&CK 映射能力调研 by Avenger SecWiki周刊（第466期) by ourren Yawf: 开源的 Web 漏洞自动化检测工具 by ourren 更多最新文章，请访问SecWiki

在线沙盒的 ATT&CK 映射能力调研 by Avenger SecWiki周刊（第466期) by ourren Yawf: 开源的 Web 漏洞自动化检测工具 by ourren 更多最新文章，请访问SecWiki

No content preview

No content preview

No content preview

Cronjobs are useful for scheduling tasks to run automatically at a specified time or interval. In this tutorial, we’ll go over how to set… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Cronjobs are useful for scheduling tasks to run automatically at a specified time or interval. In this tutorial, we’ll go over how to set… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Cronjobs are useful for scheduling tasks to run automatically at a specified time or interval. In this tutorial, we’ll go over how to set… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Article URL: https://www.reuters.com/world/europe/italy-sounds-alarm-large-scale-computer-hacking-attack-2023-02-05/ Comments URL: https://news.ycombinator.com/item?id=34677909 Points: 1 # Comments: 2

Hey guys! I've got an idea. As you all know ExploitDev, MalwareDev and Reverse Engineering aren't easy fields to get into for newcomers. While there are at least some ressources (CTFs, Pwn College, etc) out there, its still a quite complicated, niche field. May newcomers like myself get overwhelmed pretty soon and even if they decide to go further its a hard, lonely road. Thats where my idea comes in: Why not open an IRC where ExploitDevs help ExploitDevs, and so on. It would be a great way for newcomers to connect, learn together and help each others out as well as a great way for more experienced people to give back to the community. So think about it guys, if you hate it, hate it but if not send me a dm. If enough people are interested i'll open the IRC! Thank you! Hope to find many like minded people! submitted by /u/xenonexi [link] [comments]

一名 BreachForums 成员声称已经入侵了日本跨国视频游戏公司 Nintendo NX 的游戏机。

23%的高管表示，担心员工的恶意行为会导致公司遭受网络威胁。

攻击者正通过一个远程代码执行漏洞，对全球多地未打补丁的 VMware ESXi 服务器部署新型ESXiArgs 勒索软件。

https://drive.google.com/drive/folders/0B6j57G0xlEZsSFlPUFFYZ09DSGM?resourcekey=0-4sEDlWavnGdoNcJGfFGDKw submitted by /u/False-Celebration930 [link] [comments]

https://drive.google.com/drive/folders/0B_JoWW2c0wtvV3NyNEo2T0FDams?resourcekey=0-YyizbUZ_XPi_p7UzMt_eRw submitted by /u/False-Celebration930 [link] [comments]

https://drive.google.com/drive/folders/0BwFTRb4izOv4RVRPWWxyZFU4NDg?resourcekey=0-SD3STU_1pj2rHOLAOyU7Ew submitted by /u/False-Celebration930 [link] [comments]

https://drive.google.com/drive/folders/0B8EZX-tft3DaY3FhTXJUdlB5Vm8?resourcekey=0-upP0FqYgtZrKmEkv_rmK9Q submitted by /u/False-Celebration930 [link] [comments]

https://drive.google.com/drive/folders/0B0JuFoyL_HACYmRDNWI0NTdQckk?resourcekey=0-hao98LVzTcP5tjErBVq7Rg there can be nsfw submitted by /u/False-Celebration930 [link] [comments]

https://drive.google.com/drive/folders/11Lm0WP-Sw77DXUJMq4lYeXcNwvaBUllt this is men porn ... gay porn could be present too. https://drive.google.com/drive/folders/1JSrPXI0oZMBVsus68NBvZdOAoZw309t5 this is someone's toy vid collection submitted by /u/False-Celebration930 [link] [comments]

https://drive.google.com/drive/folders/12868ht9Mi3uZ7t9kVo6hHXhetmNnHfBx submitted by /u/False-Celebration930 [link] [comments]

Hi everyone, I have just released the writeup for Exploit Education's Phoenix Stack Four challenge. Any reactions & feedback would be most welcome. Thanks in advance! https://medium.com/@secnate/phoenix-challenges-stack-four-6366b29a1223 submitted by /u/ProgrammingBro123 [link] [comments]

Hey guys! Im a somewhat expercienced programmer, fluent Python, C and Ruby, just getting into Assembly as well. i've got some experience in hacking in general and have been using linux as my main OS for several. I wasnt sure where i want to go for the longest time, but ive decidet to specialize in Reverse Engineeting, Exploit- & Malware Development and Malware Analizing. since ive startet learning i cant stop ive really found my passion. i dont wanna be some random pentester using an endless list of automated tools they barely even understand. i want to know every system and os in and out, i wanna use my creativity and my passion for writing every exploit, every piece of malware myself from scratch. i want to ve able to inferact and talk to my computer direcly. Like all the hackers in the 70s or 80s did. i love dking what i xo so i wanna do it right. like i said programming is not a problem i bring experience in software development, C, Ruby, Python, Assembly as well as SQL, PHP, Ruby on Rais and Java although i gotta say all that Web stuff never really interested me all that much. i wanna work with Computers, Sotware and OS. So is there maybe somewone whod stay in contact, mentor me, could helo me learning or wbo knows even work on that stuff together? i'd be so happy! for more extensive mentoring i'd be haooy to pay you as well! submitted by /u/xenonexi [link] [comments]

السلام عليكم ورحمة الله وبركاته Continue reading on Medium »

After trying Medium to host my blog didn’t match my expectations. Good news is that I was able to export all my old entries, so there is… Continue reading on Medium »

Hello, Amazing hackers . My name is Imamul Mursalin I am a Bug Bounty Hunter. This is my 3rd Write-up, hope You guys will enjoy it and… Continue reading on Medium »

We’ll discuss the topic of cross-site request forgery (CSRF) vulnerabilities and how it can lead to a one-click account take Continue reading on Medium »

This research all began when I looked at a list of various ASCII characters in the standard and thought to my self “Could there be other… Continue reading on Medium »

submitted by /u/voidz0r [link] [comments]

submitted by /u/malacupa [link] [comments]

submitted by /u/SuaveHobo [link] [comments]

submitted by /u/Gallus [link] [comments]

If a user has macros disabled in Office, does that mean to say they're now safe from phishing attempts involving MS Office? submitted by /u/baghdadcafe [link] [comments]

Hi, Not sure if that's the right place for such question(s). I was recently analyzing a firmware of some router and while trying to extract the firmware's content I came across a magic saying "PFS/1.0" as for the file-system. As much as I searched, I haven't really found anything related to that, and I was curious to find out what is it. if that's not the place for such question, I'm sorry and would like to know what section is suitable for such questions. ​ thanks submitted by /u/Life_Afternoon_8210 [link] [comments]

Complete beginner to kali linux. I am trying to do a network scan for my home router on kali linux on vm workstation but it doesn’t scan my home router. Only scans the virtual machine network. It has something do with the VMware settings or is it something else I am doing wrong? submitted by /u/Wonderful_Warrior [link] [comments]

I’m cyberindia. today I’m going to write about recon step of redteam.here only commands given for recon and find vulnebility thogh active… Continue reading on Medium »

მასალა გამოყენებულია ჟურნალ “ეკონომისტიდან”. Continue reading on Medium »

Summary of the espionage-related news stories for the Week 5 (29 January-4 February) of 2023. Continue reading on Medium »

Open Source Intelligence (OSINT) refers to the collection and analysis of publicly available information to gather intelligence on a… Continue reading on Medium »

Article URL: https://makandracards.com/operations/532974-fix-cve-2022-44268-in-ubuntu-packages Comments URL: https://news.ycombinator.com/item?id=34666067 Points: 2 # Comments: 0

Article URL: http://tom7.org/chess/cve.pdf Comments URL: https://news.ycombinator.com/item?id=34663799 Points: 1 # Comments: 0

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Many times, in the course of our work as analysts (SOC, DFIR, etc.), we run tools...and that's it. But do we often stop to think about why we're running that tool, as opposed to some other tool? Is it because that's the tool everyone we know uses, and we just never thought to ask about another? Not so much the how, but do we really think about the why? The big question, however, is...do we validate our tools? Do we verify that the tools are doing what they are supposed to, what they should be doing, or do we simply accept the output of the tool without question or critical thought? Do we validate our tools against our investigative goals? Back when Chris Pogue and I were working PCI cases as part of the IBM ISS X-Force ERS team, we ran across an instance where we really had to dig in an…

1、杀毒原理360、腾讯电脑管家、火绒剑、金山毒霸、瑞星等等，这几个杀毒软件领头羊，现在的杀毒软件都无法脱离三个部分，扫描器、病毒库、虚拟机。然而一个杀毒软件做的是否好用，最主要的还是扫描器的速度、准确率以及病毒库是否庞大。1.1、基于特征码的静态扫描技术这种技术很容易被人想到，所以第一代的杀毒软件出现了，他们的杀毒思想就是，我只要匹配到特征字符串就可以判断出来这个文件是一个病毒。但这种方法在当今

JetBlue disclosed a bug submitted by doosec101: https://hackerone.com/reports/1267176

JetBlue disclosed a bug submitted by doosec101: https://hackerone.com/reports/1267174

submitted by /u/kubiscan [link] [comments]

submitted by /u/kubiscan [link] [comments]

整理一些 Linux 默认调度器 CFS 相关的东西。CFS、cgroup 等内核技术合力实现了进程的 CPU 资源限额（CPU 带宽控制），这是容器的基础之一。 1 概念及关系 1.1 CFS：进程（task）的公平调度 1.2 CFS 扩展 1.2.1 前提：CONFIG_CGROUPS 1.2.2 前提：CONFIG_CGROUP_SCHED 1.2.3 扩展：支持实时进程组（CONFIG_RT_GROUP_SCHED） 1.2.4 扩展：支持常规进程组（CONFIG_FAIR_GROUP_SCHED） 1.3 常规进程组 CFS 再扩展：支持 CPU 带宽控制（限额） 1.3.1 CFS 存在的问题 1.3.2 CONFIG_CFS_BANDWIDTH 1.4 CFS BANDWITH 近几年改进 1.5 小结：CFS 相关内核编译选项的关系 2 CFS 相关设计 2.1 设计目标和基本原理 2.2 核心概念 2.2.1 vruntime 2.2.2 runqueue 2.2.3 基于时序的红黑树 2.3 调度策略（scheduling policy） 2.3.1 实时进程调度策略 SCHED_FIFO SCHED_RR 2.3.2 常规进程调度策略 SCHED_NORMAL SCHED_BATCH SCHED_IDLE 2.3.3 常规进程 SCHED_NORMAL 和实时进程 SCHED_RR 调度策略的区别 2.3.4 查看或修改进程的调度属性 2.4 调度类（scheduling class） 2.5 进程组调度器扩展（group scheduler extensions） 2.6 CFS 配置项 例子 2.7 CP…

I called the merchant, who is a reputable mainstream merchant, and sent a ticket to their IT. I’m waiting for a response, but in the meantime, I’m wondering how this is possible. I have never signed into any account for this site on safari. I have signed onto my own account for this merchant in Firefox. I do not know who the person is whose account showed up in safari. I wasn’t logged in but when I went to the merchant’s homepage it said “Hi Ashley Moore” and then I saw there was a 5 in the cart icon, I clicked on it and it showed 5 items I have never heard of. It then asked me to log in and showed an email for this Ashley person. What could cause this? Could my safari have been hacked? No one but me has access to my phone. Using iOS 16.1.1, cellular data only, and no vpn submitted by /u/woniwonu [link] [comments]

Hey, I just set up LinuxLite as a VM in VirtualBox on my Windows pc, under network I picked NAT. I’m planning to use the VM to browse the internet using Chrome, without downloading or uploading anything. As far as I understand linux users are considerably safe against most types of malware because the malware can’t gain root access and is therefore unable to compromise the whole system, just local files or specific programs. But what about malware that spreads over the network, like worms for example? 1) Could such malware compromise the browser and then spread over my network to non-Linux machines? 2) considering I keep the system and software updated, how likely is that to happen? 3) If the answer to my first question is yes, how can I protect myself against such threats? submitted by /u/younggoodlooking [link] [comments]

I have been configuring a cellular router to be able to work better on the move. When connecting to it from another iPhone I got the "weak security" tip which stated that WPA/TKIP is deprecated. But how so? I thought TP Link has good products and it's a modern router. I checked and I can't configure it to use WPA3. Why not? Can't it just be done via a firmware update? submitted by /u/BigBootyBear [link] [comments]

I know that roles titles can be smoke and mirrors but I just got offered the DevSecOps Senior Advisor role with 3 years of experience and a TC of 133k CAD. The role is a mix of Cloud Sec (AWS and Azure), Data Loss Prevention, automation, in the Canadian financial sector. Since I'm still at the beginning of my career , I tend to think long-term and I'm willing to eventually try new things related to the tech sector, around cybersecurity. What would be the next logical step after this role in a few years, Architecture ? Software Engineering (I don't really code, except I learned C# a few years ago), consulting? Management ? submitted by /u/down_to_earth2 [link] [comments]

anyone know how to decipher this site? it mentions JPmorgan chase https://www.sec.gov/Archives/edgar/data/19617/000119312516528232/0001193125-16-528232.txt submitted by /u/Randomthings55 [link] [comments]

I have a setup where guest WiFi users get IP address and DNS servers from the same resources that service staff computers. These are off AD servers. While the ACLs limit access we have no control over the endpoints and have seen heavily loaded malware laptops join. So I want these servers be not AD, be on an island themselves, and be hardened. If they’re breached they impacted on guest WiFi. Think through other parts this - I need a way into from staff side, so a bastion? Or VPN? Anything else I should consider? I do need internal DNS as some resources are internal but those are web sites in a DMZ. Appreciate any advice ideas thoughts! submitted by /u/Shujolnyc [link] [comments]

I saw this advice sometime earlier, and while it improves memorability, doesn't this make you susceptible to attacks because you are more likely to choose a much smaller subset of diceware's dictionary? It has 7776 words, and I personally as a non-native English speaker would likely choose only 500 of them willingly. If someone was able to figure them out (the 500 words) through some kind of analysis am I not screwed in this case? submitted by /u/SteveSonOfJobs [link] [comments]

How do you go about defining what a user can access? So right now say you have the sub standard VPN where the user can reach the front door of 99% of applications within the enterprise. How do you go about creating the user profile to know what they need to access and eliminate the rest? Thanks submitted by /u/brasschaser [link] [comments]

I work in application security and have been joining in on some discussions to assess our products' security in depth. Some of these conversations involve topics that I have not really had to contend with so far. For example, storage location of the database connection string, management of db encryption key, code deployment method, etc -- things that have more to do with I guess the back end architecture? As an appsec engineer, I've mostly been dealing directly with web app security (OWASP top ten, SAST and DAST scanning, API testing, etc), and the learning materials I've used for appsec and for my certs never really seemed to discuss backend architecture related to the examples above. Is there a specific discipline for this within cybersec? I'm mostly interested in finding resources to study that aspect of security and build my skills. TIA! Edit: maybe 'backend architecture' is not the right terminology. Unfortunately I don't have a background in CS or development so I'm always getting tripped up with terminologies. submitted by /u/desmond_4815162342 [link] [comments]

Can someone explain to me why running a .ps1 script by double clicking on it is considered insecure? I set the execution policy to remote signed, so nothing can execute from external origin that is not signed. I'm open to using a more secure method, but I am unaware of what that solution is. Link to my original post below in regards to editing a small script I wrote. https://www.reddit.com/r/PowerShell/comments/10ssoxa/stop_powershell_script_from_closing_powershell/?utm_source=share&utm_medium=android_app&utm_name=androidcss&utm_term=1&utm_content=share_button submitted by /u/defaultaro [link] [comments]

Did you know, onlyFans has over 170 million users subscribed? That’s 50% more people than the whole population of the USA! or, over 2.5… Continue reading on Medium »

Ive curated a list of open source intelligence tools which are used by intelligence enthusiasts, coders and hackers and also added… Continue reading on Medium »

Let’s start to investigate this stealer security incident. Firstly, we can see the sender, recipient address, incident happening time and… Continue reading on Medium »

This is the second update for the Malaysian OSINT resource list. Basically, I just follow the OSINT Skills Chart for the base Continue reading on Medium »

submitted by /u/Mini_True [link] [comments]

Penetration testing, also known as pen testing, is an important aspect of cybersecurity that helps organizations identify and address… Continue reading on Medium »

Hey there reader, are you hoping to make millions with bug bounty? That’s quite the ambition you’ve got there, and while I’m not going to… Continue reading on Medium »

BugBase Apollo is a community of highly skilled security experts and hackers passionate about making the digital world safer. These elite… Continue reading on Medium »

Hello my infosec and tech mates, I hope you all are doing great at your lives even am doing great right now, (can’t say not really). So… Continue reading on Medium »

Portswigger Cross-Site Request Forgery Lab Simple Solution | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

Meu nome é Diego, e vamos ao que interessa. Continue reading on Medium »

开源软件供应链攻击回顾 by ourren 美国NSA安全运营关键原则 by ourren 25美元破解Starlink 星链终端路由器 by ourren C2服务器隐藏与Linux上线 by 路人甲 分享Jar包分析工具：jar-analyzer by ourren 更多最新文章，请访问SecWiki

开源软件供应链攻击回顾 by ourren 美国NSA安全运营关键原则 by ourren 25美元破解Starlink 星链终端路由器 by ourren C2服务器隐藏与Linux上线 by 路人甲 分享Jar包分析工具：jar-analyzer by ourren 更多最新文章，请访问SecWiki

本文仅推荐OSV-Scanner、OpenSCAP、ZAP这几款支持或包含一部分容器安全扫描功能的开源工具。

本期主要介绍了持久化战术前6项子技术理论知识，下期将给大家介绍持久化战术其他子技术。

Article URL: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21974 Comments URL: https://news.ycombinator.com/item?id=34651642 Points: 3 # Comments: 1

Parte 1 Continue reading on Medium »

submitted by /u/Gallus [link] [comments]

submitted by /u/crypt_keepr [link] [comments]

submitted by /u/f3d_0x0 [link] [comments]

submitted by /u/hacksysteam [link] [comments]

submitted by /u/Mempodipper [link] [comments]

submitted by /u/Gallus [link] [comments]

Article URL: https://nakedsecurity.sophos.com/2023/02/01/password-stealing-vulnerability-reported-in-keypass-bug-or-feature/ Comments URL: https://news.ycombinator.com/item?id=34648654 Points: 1 # Comments: 1

I changed the timezone on the device to what it was, but my report is still showing my timezone when items/images are listed for created/written/accessed. Is that normal behavior? Like in the evidence it shows the proper TimeZone/Time but once an item is bookmarked and in the report it shows my timezone in the report. Is there a way to change this? Sorry for asking here again, I really don't know where to turn to. I've taken training and I have the books, but little things like this and the HEX thing weren't explicitly mentioned. submitted by /u/dardack [link] [comments]

Users are experiencing significantly slow FTK Imager verification times when verifying their images from our file servers (WS2019 Standard VMs) for their processed images. Processing to our file servers may go at 60 MB/s yet verifying those same images may go at 7 MB/s. This is happening for all users regardless of what data they are trying to verify. We host the virtual file servers on Dell R730s running Hyper-V. I have tried setting exclusions in Windows Defender for the network locations, it does speed up some image verification as it no longer scans the files, but it always seems to sink back down to 7-15 MB/s for most images. When the data is verified locally and not on the network, verification speeds seem to match the processing speeds of 60 MB/s. The file servers themselves have 10Gb vNICs and handle data copying easily and doesn't slow down when transferring data to our users, data is still transferred around 80-90 MB/s to th user's 1Gb computers. Any insight is appreciated, these slow verification times are hindering workflow! Our environment: -Clients have Dell T7920s, T5820s, T7910s -Servers are Dell R730s with SAS connections to storage enclosures running HDDs and using Microsoft Storage Spaces Direct. -Connections are 10Gb to switches and 1Gb to user computers. submitted by /u/defaultuser100 [link] [comments]

submitted by /u/dmchell [link] [comments]

Passive reconnaissance is the process of collecting information in a covert manner about an intended target without the target knowing… Continue reading on Medium »

Unlocking the Secrets to a Successful Cybersecurity Career: A Step-by-Step Guide for Beginners Continue reading on InfoSec Write-ups »

What happened with Bug Zero? Continue reading on Bug Zero »

Local File Inclusion (LFI) is a type of vulnerability commonly found in web applications. It allows an attacker to include a local file… Continue reading on Medium »

Sec 542 & 642 notes in here: https://lnkd.in/dkeGVvy Continue reading on Medium »

This story of how I find vulnerabilities in google, Twitter, apple, and dell for fun after more than 40 tries Continue reading on Medium »

Hey folks, I am Bharat Singh a Security researcher and Bug Hunter. I am here with an amazing writeup about Password Reset Poisoning with… Continue reading on InfoSec Write-ups »

Continue reading on Medium »

Enum and information: Continue reading on Medium »

We Can Looks Most Commonly Shown Status Code Along With Their Saying. Continue reading on Medium »

El IMINT o Inteligencia de Imágenes, es una disciplina dentro de la Inteligencia que consiste en el análisis y/o explotación de imágenes… Continue reading on Medium »

There's been a merger, and I'm trying to address a blind spot with all the new systems and widgets. I'd like to find any/all API services available and confirm they are secured. While I could just dump dns entries and loop through them with /api/ at the end of a curl... i don't feel like that's particularly exhaustive. I have Nessus running, but I haven't found where they have a plugin that really handles this. I did some poking around the open-source world and the search terms are generic enough that i'm not getting great results. submitted by /u/lonejeeper [link] [comments]

I see people hiding certificate IDs when posting on social media platforms. Is there any solid reason or restrictions or people just following trend blindly. submitted by /u/dauhui [link] [comments]

Internet Bug Bounty disclosed a bug submitted by kurohiro: https://hackerone.com/reports/1813831 - Bounty: $2400

Sorare disclosed a bug submitted by gokulsk: https://hackerone.com/reports/1817214 - Bounty: $300

TikTok disclosed a bug submitted by amans: https://hackerone.com/reports/1247108 - Bounty: $1564

据多家媒体消息，阿里云盘在2月3日22点30分左右出现故障无法访问。

《任务》中指出，推进电力行业网络与信息安全工作。

Twitter宣布从2月9日开始它的API（包括 v2 和 v1.1）将不再支持免费访问，使用其API将必须付费。

持续检测网络安全威胁、准确感知网络安全风险、及时阻断网络攻击活动、完善改进网络防护措施。

前言这篇同样是之前学习Redis相关漏洞的一些总结，Redis未授权漏洞成因redis绑定在 0.0.0.0:6379，且没有进行添加防火墙规则避免其他非信任来源ip访问等。

各位 Buffer 周末好，又到了周报时间，我们总结推荐了本周的热点资讯、安全事件、一周好文和省心工具，保证大家不错过本周的每一个重点！

文笔生疏，措辞浅薄，望各位大佬不吝赐教，万分感谢。

说到汽车网络安全威胁，网络攻击者有无数种方法来窃取车辆和驾驶员信息，并导致车辆的功能出现问题。

分享我cissp的学习经验

reGeorg该工具是基于socks5而且支持的脚本很多，例如aspx|ashx|jsp|jspx|php等等。

QTS 5.0.1 和 QuTS hero h5.0.1 两款软件中存在严重漏洞。

建筑和家居装修巨头 Andersen Corporation 暴露了客户的私人数据，包括家庭照片和地址。

自 2021 年 9 月以来，全球至少有 1200 台 Redis 数据库服务器被一个名为 HeadCrab 恶意软件威胁。

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

In many instances, the answer is becoming “when” not “if.” Continue reading on System Weakness »

OSS-Fuzz announced to add JavaScript support in 2023: https://security.googleblog.com/2023/02/taking-next-step-oss-fuzz-in-2023.html Continue reading on Medium »

In many instances, the answer is becoming “when” not “if.” Continue reading on System Weakness »

OSS-Fuzz announced to add JavaScript support in 2023: https://security.googleblog.com/2023/02/taking-next-step-oss-fuzz-in-2023.html Continue reading on Medium »

One of the most discussed concepts in the Information Security world in recent history has been Zero Trust. Although many vendors claim to have products for implementing Zero Trust, an organization must not view them as an instant solution to achieving Zero Trust. Zero Trust should be viewed as a philosophy comprised of many controls... The post The First Steps on the Zero Trust Journey appeared first on TrustedSec.

Article URL: https://ioc.exchange/@FuzzingWeekly/109800061913485158 Comments URL: https://news.ycombinator.com/item?id=34639120 Points: 1 # Comments: 0

submitted by /u/NullVoidPointer [link] [comments]

Portswigger’s Cross-Origin Resource Sharing Lab Simple Solution | Karthikeyan Nagaraj Continue reading on Medium »

Portswigger’s SQL Injection Lab Solution | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

The rise of cyberattacks has been a significant concern for every organization. In the Data-driven business, organizations in various… Continue reading on Medium »

Summary Continue reading on Medium »

This blog is about how I got my first HOF after chaining multiple bugs. Continue reading on InfoSec Write-ups »

Cybersecurity is the safeguarding against cyber threats of internet-connected systems, including data, software, and hardware. To prevent… Continue reading on Bug Zero »

We software developers are always searching for methods to improve our processes and function more productively. Continue reading on Bug Zero »

This write-up is specially made for showing the power of my new tool, It’s called Xssor.go This tool is a XSS payload reflection tester… Continue reading on Medium »

Article URL: https://hothardware.com/news/keepass-devs-downplay-password-theft-vulnerability Comments URL: https://news.ycombinator.com/item?id=34635107 Points: 1 # Comments: 1

https://213.230.96.51:8090/files/ebooks/ submitted by /u/revwolf [link] [comments]

https://itonaku.xyz/ submitted by /u/Isolatedleliel [link] [comments]

Lots and lots and lots of Cyber, Accounting, etc... https://www.kgay4all.com/seioqueseiporleroqueleio/Books/ ​ Graphics program manuals and guides of all kinds. https://lira.epac.to/DOCS-TECH/Graphics/Photoshop/ ​ Polymers. It's all polymers. https://www.eng.uc.edu/~beaucag/Classes/Properties/Books/ submitted by /u/Shitemoji69 [link] [comments]

Anyone deploy Wazuh where you needed separate indexer, server, and dashboard servers? I’ve asked in that sub and got no response. Don’t need scale specifics, just high level here are the pieces. It looks to me like I’d need (as an example): 3 indexers 1 server 1 dashboard Load balancer for indexers submitted by /u/Shujolnyc [link] [comments]

Users who use Trellix (exMcAfee) Endpoint Protection (ENS), do you have any success story with fixing consuming high CPU? I read the entire McAfee forum, all the guides and troubleshooting, server profiling, whitelists and even just turned off the antivirus on the server, but the CPU is still high +20-50% by McAfee in turn off mode :( I've reinstalled it 10 times already. How did you solve the problems? Also, a question for other users who use other antiviruses, how do you deal with high CPU? Do you often have these problems? submitted by /u/athanielx [link] [comments]

I am looking for tools to do "static" log analysis. (Not sure if this is the correct term for it) So I am talking about an air-gapped system where it is not possible to collect the data (log files) over the network. Every couple of months the log files will be collected via USB sticks and combined in one place. Right now the data is fed into ELK and then parsed and analyzed but I was wondering if there are maybe tools which are made to do these kind of analysis. Because from my understanding ELK is not meant to be used like this. Do you have any recommendations? submitted by /u/Ludtwigk [link] [comments]

Long Story short, was a court reporter and hands gave out. I'm a little discouraged because I'm in my 30s and am wanting to start a new chapter in my life, and I know NOTHING about computers. I'm not even sure how to work Reddit. This is my 2nd post. I'm not even sure I'm in the right spot lol...Anyway, I looked into CS50 (the first lesson) and I loved it. I've always loved math, I've always loved the detail. I don't know, I want to give it a shot. A real shot. What do I need to know to grow in knowledge and really set myself up for success here? School isn't an option anymore. I'm 60k in the hole and paying that baby off. Any Computer Science people out there? Or Cyber Security that would give an advice or two? submitted by /u/No_Conversation5705 [link] [comments]

After the 2022 LastPass breach, many organizations began searching for alternative password vault solutions. KeePass, a legacy open-source option has risen to the top for many organizations evaluating their options. Others have been using this option already for years. A recent POC demonstrating who to abuse the Trigger feature was released and assigned a CVE.... The post What this KeePass CVE means for organizations searching for new password vaults appeared first on TrustedSec.

Shopify disclosed a bug submitted by kannthu: https://hackerone.com/reports/1444682 - Bounty: $9400

submitted by /u/jat0369 [link] [comments]

submitted by /u/adityatelange [link] [comments]

submitted by /u/sullivanmatt [link] [comments]

submitted by /u/_m-1-k-3_ [link] [comments]

submitted by /u/j_bono [link] [comments]

submitted by /u/hacksysteam [link] [comments]

submitted by /u/hardenedvault [link] [comments]

submitted by /u/cfambionics [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Hello all, i am wondering if there is any software to analise gmail acounts, like logins, Accesses, points of logins, in freeware/opensource? Thank you submitted by /u/hpbalmeida [link] [comments]

Anyone ever used it before if so how was it. Also it works on only works on Mac is con or pro for consumer and forensic experts ? submitted by /u/Jack_gg123 [link] [comments]

Hi All, Curious about what everyone has been using or would consider to use for a portable forensic workstation. I am well aware the meta are gaming laptops. Our practice is a small team and we're undergoing an equipment refresh. We have Alienwares and Dells currently, but I would like to get an idea of what everyone else seems to be using, my team leader is open to suggestions. We're a Cellebrite and Axiom shop; my understanding in basic terms is Cellebrite is bound by RAM and Axiom bound by CPU for parsing images. Any noticeable difference with modern (meaning 1-2 year old) Intel vs AMD CPUs? Also open to suggestions for smaller laptops that may hit a sweet spot in terms of performance comparable to a gaming machine- our practice sometimes delivers devices to clients for remote collections. submitted by /u/greengobblin911 [link] [comments]

submitted by /u/Alarming_Arm_7724 [link] [comments]

In this week's red team tip. I show a way to enumerate AD in an OPSEC-safe way with Layer8Security's SilentHound. This tool uses a single LDAP query to list AD and caches the results locally. It's not nearly as loud or as well fingerprinted as SharpHound/AzureHound. Plus, you can convert the local cache to JSON and use jq or other tools to query the cached data. https://youtu.be/MRLZO17ZrmA submitted by /u/Infosecsamurai [link] [comments]

It may seem counterintuitive to pay someone to tell you your shortcomings, but smart companies today are shelling out dollars and… Continue reading on Medium »

应对监管部门审计，如何提供安全事件应急响应管理制度的落实情况；WebShell的检测思路及控制措施的探讨，更多内容欢迎点击~

2022 年，黑客在加密货币领域窃取了创纪录的38亿美元资金。

依照《保密协议》处以100万元的经济赔偿，责成其对下游供应商加强信息安全管理，并对泄密人进行处理。

之前我们一直在使用由dyld及其NS Create Object File Image From Memory / NS Link Module API方法所提供的Mach-O捆绑包的内存加载方式。

针对移动银行的凭据收集网络注入与加密货币应用程序一起在暗网上出售。

新型加密器被称为LockBit Green，通过对样本进行逆向工程，发现它100% 基于 Conti泄露的源代码。

国家互联网应急中心重磅发布Coremail企业邮箱Q4季报，钓鱼邮件高达6666万，环比上升 48.12%，谨防黑产假冒国家部门发送【人才/劳务/疫情补贴】主题钓鱼诈骗！

作者：雪诺凛冬实验室 gd 原文链接：https://mp.weixin.qq.com/s/R1BoWivtTxo0zFk4nyBFTw 前言 随着近几年HW实战的开展所有人都对Cobalstrike不再陌生，相关安防设备一直在思考如何在流量侧/终端侧识别出CS的行踪。攻击者除了使用习惯上基于插件进行开发提效外，还有一些需要关注对抗的点来提升CS的隐藏性，我们会分两篇文章将CS在流量层面、内...

作者：雪诺凛冬实验室 gd 原文链接：https://mp.weixin.qq.com/s/R1BoWivtTxo0zFk4nyBFTw 前言 随着近几年HW实战的开展所有人都对Cobalstrike不再陌生，相关安防设备一直在思考如何在流量侧/终端侧识别出CS的行踪。攻击者除了使用习惯上基于插件进行开发提效外，还有一些需要关注对抗的点来提升CS的隐藏性，我们会分两篇文章将CS在流量层面、内...

In the west, the practice of open-source intelligence is the norm. While particular weapon systems are seen as almost magical for the war… Continue reading on Medium »